Best Threat Intelligence & Threat Actor OSINT Tools (2026) | FaceSeek
The best threat intelligence tools to research threat actors, track campaigns, and monitor live cyber threats.
Cyber defense runs on intelligence. These threat-intel tools help you research threat actors, look up indicators of compromise, and watch attacks unfold on live threat maps.
What to look for in threat intelligence & threat actor osint tools
Combine actor-profile databases, IOC lookup services, and real-time threat feeds. The goal is context — turning a raw indicator into a known actor, campaign, or technique.
The best threat intelligence & threat actor osint tools
- APT Groups and Operations — Know about Threat Actors, sponsored countries, their tools, methods, etc.
- Bi.Zone — 148 threat groups with detailed TTPs.
- BreachHQ — Provides a list of all known cyber threat actors also referred to as malicious actors, APT groups or hackers.
- Cybergeist — Cybergeist.io generates intelligence profiles about key threats and threat context that is actively being discussed and reported upon across the internet.
- Dark Web Informer — Tracking 854 Threat Actors as of 29th of May 2025.
- ETDA — Search for Threat Actor groups and their tools.
- FortiGuard Labs — Powered by FortiGuard Labs, our Threat Actor Encyclopedia provides actionable insights, helping security teams prepare and streamline advanced threat hunting and response.
- KNOWLEDGENOW — Trending Threats.
- lazarusholic — Total 203 threat actors.
- Malpedia — Get List of threat actor groups.
- MISP Galaxy — Known or estimated adversary groups as identified by 360.net.
- OPENHUNTING.IO — Threat Library Collecting Information.
Use them together
No single tool sees everything. The fastest workflow is to run one target across several at once — our OSINT tools directory lets you do exactly that from the investigation console, and the Threat Actor Search category page lists every option. Related reading: best domain ip osint tools.
Frequently asked questions
What is threat intelligence?
The practice of collecting and analyzing information about cyber threats — actors, tools, indicators, and techniques — to anticipate and defend against attacks.
How do I look up an indicator of compromise?
Use IOC lookup and reputation services to check a hash, IP, domain, or URL against known malicious activity, then pivot to related indicators.
Are there free threat intelligence tools?
Yes — many reputation services, threat feeds, and live threat maps are free, and open-source frameworks aggregate them for research.
Try a reverse face search now
Upload a photo and find where a face appears across the public web — free searches every day.
Start a free face search