Skip to content
THREATWIRE

SpiderFoot

OSINT automation for footprinting

OSINT automation tool with a web UI and more than 200 modules that gather data on IPs, domains, emails, names and more from public sources.

Open sourceMIT
Alternative toMaltego
Homepage of SpiderFoot
Official repository page, captured by ThreatWire.

What SpiderFoot does

SpiderFoot takes a target (domain, IP address, email address, name and more) and runs modules that query public data sources and feed each other's results. It is used to map an organisation's attack surface and for threat intelligence investigations.

It ships with a web interface and a command-line mode and can export results as CSV, JSON or GEXF graphs. Check repository activity before relying on specific modules, as some data sources change often.

Key features

  • 200+ data-gathering modules
  • Web UI and CLI
  • Correlation rules to highlight findings
  • Export to CSV, JSON and GEXF
  • Runs with or without third-party API keys

Licence

MIT · MIT License · Open source

Checked by ThreatWire against the repository's licence file on 2026-10-20. GitHub detects: MIT.

Security of SpiderFoot itself

No published advisory found for SpiderFoot in GitHub repository advisories. That does not mean the tool has no vulnerabilities.

Sources: GitHub repository advisories · checked 2026-10-20.

Categories and tags

OSINT and attack surface discoveryThreat intelligence platforms#osint#automation#python#web-ui#footprinting#threatintel#infosec#intelligence-gathering

Related tools

  • theHarvester

    Gather emails, names and subdomains from public sources

    Python OSINT tool that collects emails, names, subdomains, IPs and URLs about a domain from search engines and public data sources.

    Stars
    18k
    Forks
    2.7k
    Last commit
    1 day ago
    GPL-2.0-onlyOpen sourceOSINT and attack surface discovery
    Alternative toMaltego
  • OWASP Amass

    Attack surface mapping and asset discovery

    OWASP project for in-depth attack surface mapping: discovers domains, subdomains, IP ranges and related assets using DNS and many public data sources.

    Stars
    15k
    Forks
    2.2k
    Last commit
    6 months ago
    Alternative toMaltego
  • Subfinder

    Fast passive subdomain enumeration

    ProjectDiscovery's subdomain discovery tool that queries passive online sources, built for speed and easy chaining with other tools.

    Stars
    15k
    Forks
    1.6k
    Last commit
    today
    Alternative toMaltego
  • masscan

    Asynchronous TCP port scanner for large ranges

    Internet-scale port scanner that sends SYN packets asynchronously with its own TCP/IP stack, designed to scan very large address ranges quickly.

    Stars
    26k
    Forks
    3.2k
    Last commit
    14 days ago
    AGPL-3.0-onlyOpen sourceNetwork scanning and analysis
  • ffuf

    Fast web fuzzer for content and parameter discovery

    Fast web fuzzer written in Go, used to discover hidden files, directories, virtual hosts and parameters by replacing a FUZZ keyword with wordlist entries.

    Stars
    17k
    Forks
    1.6k
    Last commit
    23 days ago
  • OpenCTI

    Cyber threat intelligence knowledge platform

    Platform by Filigran to structure, store and visualise threat intelligence as a STIX 2.1 knowledge graph, with many connectors.

    Stars
    10k
    Forks
    1.5k
    Last commit
    today
    Apache-2.0Open sourceThreat intelligence platforms
    Alternative toRecorded Future
Share on X@threatwire_https://www.threatwire.tech/tools/spiderfoot