OSINT tools compared: username search, availability and recon
A plain-language guide to the OSINT tools people ask us about most. Each page explains what the tool does, how to run it, where it beats us and where it does not. We checked every tool against its own repository or website on 2026-10-13.
Username search tools
Take one handle and look for public profiles that use it on other sites.
- Sherlock (Username search (CLI), MIT). What the Sherlock username tool does, how to install and run it, and how it compares with a browser-based Sherlock alternative that needs no setup.
- Maigret (Username search (CLI and web UI), MIT). How the Maigret username OSINT tool works, how to install and run it with pip or Docker, and how it compares with a no-install browser alternative.
- WhatsMyName (Open username dataset, CC BY-SA 4.0). The WhatsMyName project by Micah Hoffman: a community username dataset under CC BY-SA 4.0. What it is, how tools use it, and how we credit it.
- Blackbird (Username search (CLI)). How the Blackbird OSINT username tool works, how to run it from the command line, and how it compares with a browser-based Blackbird alternative.
- Social Analyzer (Profile finder (API, CLI, web app), AGPL-3.0). What Social Analyzer does, how to install it as a Python package or local web app, and how it compares with a lighter browser username checker.
- UserSearch (Username search (web, freemium)). How UserSearch.org works, what is free and what is premium, and how it compares with a free UserSearch alternative that has no paid tier.
- IDCrawl (People search engine). What IDCrawl is, how its people search differs from a username search, the privacy questions it raises, and an IDCrawl alternative for handles.
Username availability checkers
Built for people picking a new name: is this handle (and often the domain) still free?
- Namechk (Username and domain availability). How Namechk checks usernames and domain names, where it falls short, and a Namechk alternative with more sites and clearer statuses.
- Instant Username Search (Username availability (search as you type)). How Instant Username Search (instantusername.com) works, its limits, and an alternative that checks far more sites with four result states.
- Namecheckup (Username and domain availability). How Namecheckup checks handles and 40+ domain endings, what it does well, and how it compares with a username checker that covers far more sites.
OSINT frameworks and recon suites
Bigger toolkits for domains, infrastructure and multi-step investigations, plus directories of tools.
- SpiderFoot (OSINT automation framework, MIT). What SpiderFoot is, how to install and run its web UI, how it handles usernames, and how it compares with a simple browser username checker.
- Recon-ng (Web reconnaissance framework, GPL-3.0). What the Recon-ng framework does, how to install and launch it, how its module marketplace works, and how it compares with a browser username tool.
- theHarvester (Domain reconnaissance, GPL-2.0). What theHarvester collects about a domain, how to install it with uv and run a first scan, and why it is a different job from username search.
- OSINT Framework (Directory of OSINT tools, MIT). How to use osintframework.com, what its T, D, R and M markers mean, and where a username search tool fits in its tree of free OSINT resources.
Email and phone enumeration (educational)
What these tools reveal about an email address or phone number, and how to protect your own.
- Holehe (Email account enumeration, GPL-3.0). What the Holehe OSINT tool reveals about an email address, why that is a privacy risk, and practical steps to protect your own email accounts.
- PhoneInfoga (Phone number information gathering, GPL-3.0). What PhoneInfoga can find from a phone number, why a public number is a privacy risk, and how to keep your own number out of public profiles.
- Epieos (Email and phone reverse lookup). What the Epieos reverse lookup can reveal from an email address or phone number, the privacy risks, and how to protect your own accounts.
How to choose
- Want a quick answer in the browser? Use a web checker. Ours checks 3,166 sites with no install or sign-up.
- Need scripting, proxies or self-hosting? Sherlock, Maigret and Blackbird run on your own machine.
- Picking a brand name? Availability checkers like Namecheckup and Namechk cover more domain endings than we do.
- Mapping a whole organization with permission? SpiderFoot, Recon-ng and theHarvester are built for that.
- Worried about your own email or phone number? Read the Holehe, PhoneInfoga and Epieos pages for how to protect yourself. We do not offer email or phone enumeration.
Search a username now
Free, no sign-up. Checks 3,166 sites; the username is not stored or logged.
Frequently asked questions
Which OSINT tool is best for username search?
It depends on how you work. Sherlock and Maigret are strong if you are comfortable in a terminal and want scripting or recursive searches. If you want a quick browser search, WhatsMyName Apps checks 3,166 sites drawn from the WhatsMyName, Sherlock and Maigret lists.
Are these tools free?
Most of the open-source tools here are free to run. Some web services, such as UserSearch and Epieos, have free tiers with paid upgrades. Framework modules often need API keys for third-party services.
Is it legal to use OSINT tools?
Looking at public information is generally lawful, but how you collect and use it is regulated. Research only for legitimate purposes, follow each site's terms and privacy law, and get written permission before any security assessment.
Is WhatsMyName Apps the WhatsMyName project?
No. WhatsMyName Apps is an independent tool that uses the WhatsMyName dataset under CC BY-SA 4.0, alongside the Sherlock and Maigret lists.
Related guides
- OSINT username search · Reverse username lookup · Platform username checkers
- Username OSINT for beginners · Open-source credits
Names and trademarks belong to their owners. WhatsMyName Apps is independent and not affiliated with or endorsed by any tool listed here or its authors.