Find out what the open internet already knows about a company, a domain, a brand — or your own organisation — before someone else uses it against you.
Open-Source Intelligence (OSINT) investigation collects and verifies information from publicly available sources: websites, social media, company registries, court records, leaked-data indexes, domain and infrastructure data, images and maps. Done properly, it answers real business questions: is this vendor legitimate, who is behind this scam domain, what could an attacker learn about our executives, is this candidate who they say they are?
Who this is for
- Businesses doing due diligence on a partner, vendor, investor or acquisition target
- Founders and executives who want to know their digital footprint and reduce it
- Brands facing impersonation: fake social accounts, look-alike domains, counterfeit sellers or phishing pages
- Law firms, HR teams and agencies that need documented, sourced findings they can rely on
- Security teams who want an external attack-surface view of their organisation
What we offer
- Company & vendor due diligence: registration and directors (MCA, OpenCorporates), litigation and news, web presence, reputation signals and red flags
- Executive digital footprint assessment: what is exposed about a person online (profiles, leaked credentials, addresses, family links, photos) and a plan to reduce it
- Brand impersonation & fraud investigation: identifying operators behind fake domains, scam pages or fraudulent accounts, with evidence for takedown requests
- External attack-surface reconnaissance: domains, subdomains, exposed services, leaked credentials and employee information an attacker could use (pairs well with our VAPT service)
- Incident support: tracing phishing infrastructure or social-engineering campaigns targeting your staff
What you get
- Sourced investigation report: every finding linked to its source, with capture date, screenshots and a confidence rating (confirmed / probable / unverified)
- Executive summary in plain language with clear conclusions
- Evidence archive: archived copies of pages and profiles so findings remain provable if content is deleted
- Recommendations: takedown steps, footprint-reduction actions or security fixes as applicable
- Debrief call to walk through the findings
How it works
- Scoping call: the question you need answered, the subject(s), and the lawful basis for the investigation
- Written authorisation and quote: fixed price based on scope; NDA signed on request
- Investigation: methodical collection and cross-verification using the techniques we document in our tools directory and guides
- Report and debrief: findings delivered as a PDF report with the evidence archive
A single-subject investigation typically takes 3–7 working days. Larger due-diligence or attack-surface engagements are scoped individually.
Our ethical boundaries
We only use lawful, publicly available sources and legitimate paid databases. We do not hack, phish, pretext, bypass authentication, access private accounts or purchase stolen data. Investigations concerning a specific private individual require a legitimate purpose and written authorisation from the client, and we decline requests that look like stalking, harassment or unlawful surveillance. Findings are handled confidentially and deleted after the agreed retention period.
Why work with us
Investigations are carried out personally by Bhaskar Soni, a hands-on security practitioner who also maintains this site’s directory of 180+ OSINT and security tools. The same methodology we teach is the one we use: structured collection, two-source verification and evidence preservation. We work with clients across India and internationally, remotely.
Frequently asked questions
Can you find anyone’s address or phone number?
No. We do not provide people-search or skip-tracing services for private individuals, and we do not help locate someone who does not want to be found. We investigate companies, brands, infrastructure and — with authorisation — the public footprint of consenting individuals or fraud suspects for the purpose of a lawful complaint.
Is OSINT legal in India?
Collecting publicly available information is lawful. How it is used matters: harassment, stalking, defamation and unauthorised access are offences under the IT Act and IPC/BNS. We document the lawful basis for every engagement and keep the scope within it.
Will the subject know they are being investigated?
Passive OSINT does not alert the subject. We do not contact subjects, send friend requests or use pretexting unless explicitly agreed for a specific lawful purpose.
How much does an investigation cost?
It depends on the number of subjects, the depth required and the time frame. Describe the question you need answered in the form below and we will send a fixed quote.
Do you provide reports usable in legal proceedings?
Our reports document sources, capture times and methods, and we preserve evidence copies. Whether a report is admissible depends on the forum; we can liaise with your lawyer on format and chain-of-custody needs.
Request a quote
Describe the question you need answered and the subject type (company, domain, brand, individual with authorisation). Choose OSINT Investigation in the form below; we reply within 1–2 business days with scope questions and a fixed quote.
Prefer email? Write to contact@youngstercompany.com.