OSINT Toolbox app icon

OSINT Toolbox

Investigate the Web, Privately

From the developer of the award-winning Network Toolbox.

iOS iPadOS macOS Universal Purchase
Download on the App Store

OSINT — Open-Source Intelligence — is the discipline of gathering and analysing information from publicly available sources: domain registrations, DNS records, IP reputation data, breach databases, certificate logs, social profiles, and more. OSINT Toolbox brings this workflow natively to every Apple device, replacing a patchwork of web tools with one consistent, private app that requires no account and collects no data.

Key Features

Passive & Safe

Never touches target infrastructure. Every module queries public APIs and open data sources only — no active scanning, no port probing, no intrusion of any kind.

Privacy First

No analytics, no accounts, no data collection of any kind. App Store privacy label: Data Not Collected. API keys live exclusively in iCloud Keychain.

Fully Native

Built in Swift 6 and SwiftUI. No Electron shell, no third-party SDKs, no web wrappers. Just Apple technology, done properly — fast and reliable on every device.

Replace the Browser Tabs

Consolidate what used to take a dozen accounts and browser tabs into one transparent, consistent app. No deep prior knowledge required.

Parallel intelligence.
Real-time results.

Enter any indicator and OSINT Toolbox automatically runs every relevant module in parallel. DNS records, RDAP registration data, certificate transparency logs, threat intelligence, breach data — results stream in live as modules complete.

Discovered entities pivot automatically into new investigation threads, building a connected picture without manual effort. Save everything to investigation notebooks that sync across all your devices.

  • Domain
  • IP Address
  • Email
  • URL
  • File Hash
  • ASN
  • Phone Number
  • Username
  • Company
OSINT Toolbox on Mac showing a domain investigation with DNS records, RDAP registration data, and threat intelligence findings

Standalone tools,
always a tap away.

A growing catalog of investigation utilities that work on-device without any scan or API key. Pick a tool, enter your input, get your answer — quickly and privately.

  • DNS Lookup & Record Inspector
  • IP & Domain Geolocation
  • SSL/TLS Certificate Inspector
  • File & Text Hash — MD5, SHA-1, SHA-256, SHA-512
  • JWT Decoder & Inspector
  • CIDR & Subnet Calculator
  • URL Encoder / Decoder & Analyzer
  • Mail Header Analyzer
  • MAC Address & OUI Lookup
  • Port & Service Reference
OSINT Toolbox utilities catalog showing the grid of available investigation utilities
Works with Apple Intelligence

Just say what you need.

OSINT Toolbox integrates Apple's on-device AI so you can describe an investigation in plain language — no need to know which modules to pick or how to format the input. The app understands your intent and sets everything up for you.

You type
"Check if cloudflare.com has been flagged for malware and show its DNS records and registration details"
App sets up
domain: cloudflare.com VirusTotal DNS Resolver RDAP

Powered by Apple's on-device Foundation Models — no data leaves your device. Requires a compatible iPhone, iPad, or Mac with Apple Intelligence enabled. The feature is optional and the app works fully without it.

Your investigation.
Your data.

OSINT Toolbox is built on a strict principle: the data you investigate with belongs to you alone. The app collects nothing, sends nothing, and stores nothing outside your own devices and iCloud account.

No account required — ever
No analytics, no telemetry, no third-party crash reporting
App Store privacy label: Data Not Collected
API keys stored exclusively in iCloud Keychain — never logged or exported
All DNS queries routed through DNS-over-HTTPS
No third-party SDKs or libraries of any kind
iCloud sync — results never pass through intermediate servers
Indicator values never written to system logs
Passive only — no active scanning, no contact with target infrastructure