OSINT Toolbox

From the developer of the award-winning Network Toolbox comes a new standard for open-source intelligence on Apple platforms.

OSINT — Open-Source Intelligence — is the practice of gathering and analysing information from publicly available sources: domain registrations, DNS records, IP reputation databases, breach data, certificate logs, and more. OSINT Toolbox makes these capabilities available natively on iPhone, iPad, and Mac — with no accounts, no data collection, and no active probing of target systems.

REPLACE A DOZEN BROWSER TABS WITH ONE APP

Security researchers, journalists, IT professionals, and privacy-conscious investigators have long relied on a patchwork of web tools — each requiring a separate account, each handling your data differently, many operating opaquely. OSINT Toolbox consolidates the most important of these into a single, transparent, and consistent interface that works the same on every Apple device.

INTELLIGENCE MODULES

Enter any indicator — domain, IP address, email address, URL, file hash, ASN, phone number, username, or company name — and OSINT Toolbox automatically runs every relevant module in parallel. Results stream in live. Discovered entities can pivot automatically into new investigation threads.

Built-in intelligence sources include:
• DNS resolution and reverse DNS
• RDAP and WHOIS registration data
• Certificate transparency logs
• VirusTotal, Shodan, AbuseIPDB, GreyNoise
• HaveIBeenPwned, ThreatFox, MalwareBazaar
• Gravatar, LinkedIn, social account presence
• BGP routing, ASN info, IP geolocation
• And more — with new modules added regularly

Bring your own API keys for services that support it. Free modules work without any key at all.

APPLE INTELLIGENCE BUILT IN

OSINT Toolbox integrates Apple's on-device AI so you can describe an investigation in plain language — no need to know which modules to pick or how to format the input. Just type what you're looking for:

"Check if cloudflare.com has been flagged for malware and show its DNS records and registration details"

The app understands your intent, selects the right indicator type, and activates the relevant modules — entirely on-device, privately, with no data sent to any cloud service. The feature is optional and requires a device with Apple Intelligence enabled.

INVESTIGATION UTILITIES

A growing catalog of standalone