OSINT TOOLS — FREE IMAGE GEOLOCATION, NO ACCOUNT
Most OSINT tools lists hand you fifty links. This page hands you one working tool first — drop in an image and see where it was probably taken — then an honest map of what to reach for next.
Images auto-delete within 24 hours. Never used to train the model.
No image to hand? See what these OSINT tools returned on recorded cases:
Holding a username, domain, email or video instead of an image? Jump to the tool map ↓
Most "best of" pages are link lists. Among the OSINT tools we ship, image work is the one lane we actually build — so that tool sits first. Everything below it — usernames, domains, breaches, metadata, video — is a map of the rest of the stack, not a pitch: free tier, API availability, and where each one stops being useful.
Start from the artefact, not the tool
OSINT tools are usually catalogued by category — which only helps if you already know the category. Investigations start from an artefact: a screenshot, a handle, a domain, a leaked address. Match what is in your hand to a free starting point, and to what you graduate to when the free tier runs out.
| What you're holding | Free starting point | When you outgrow it |
|---|---|---|
| A photo or screenshot | This page — upload it, ranked places with reasoning in ~30s | Paid geolocation APIs, or a Maltego graph once you have more than an image |
| An image that may still carry metadata | Our in-browser EXIF viewer — nothing leaves the tab | ExifTool CLI for batches and archives |
| A username or handle | Sherlock, WhatsMyName | Maltego CE for pivoting, commercial identity platforms for bulk |
| An email address | Have I Been Pwned, Holehe | Intelligence X for historical leaks and pastes |
| A domain or IP | theHarvester, Shodan free tier | Shodan membership, Censys for certificate and asset pivots |
| A company name | OpenCorporates and national registries | BuiltWith, paid registry aggregators |
| A video | InVID / WeVerify for keyframes | Pull the keyframes back through this page, one at a time |
| Nothing but a category question | OSINT Framework — it is a directory, not a tool | Any of the above, once you know what you are looking for |
Nothing in this OSINT tools table is affiliate-linked and nothing here paid to be listed. Where a free tier genuinely finishes the job, the "outgrow it" column says so. Run the image one now ↑
Twelve tools, honestly scoped
Every osint tools roundup gives you strengths. Fewer give you the sentence that actually saves your morning: where the tool stops. This table is capped at twelve entries that working investigators reach for repeatedly — including ours, scoped to the one thing it does.
WhereIsThisPlace (this page)
Maltego
SpiderFoot
Shodan
Censys
theHarvester
Sherlock
Maigret
Holehe
Have I Been Pwned
ExifTool
Google Lens / TinEye
InVID / WeVerify
Free tiers and pricing for OSINT tools move. Everything above was checked against each vendor's public documentation at publication; treat the free-tier column as a starting assumption, not a guarantee.
Not image matching
This is the part of the OSINT tools stack we build, so here is the mechanism instead of a claim. Unlike reverse-image matching, visual reasoning does not need your image to exist anywhere online. It reads what is inside the frame and eliminates places until a short list survives.
Street names, shop signage, transit boards and licence plates are the fastest way from "somewhere on Earth" to a district. Script narrows the region, language narrows the country, a specific business name can close the case outright. Global brand slogans are near-worthless — they are everywhere. If a first pass only returns a country, crop tight to the sign and run it again. Try a cropped sign ↑
Which side traffic drives on, road markings, kerb profiles, bollards, utility poles, guardrail design, plate colour and shape — these are standardised nationally and survive heavy compression. They rarely name a city, but they eliminate continents, which is most of the work.
Species mix and season narrow latitude. Slope, horizon and vegetation zones narrow elevation. Shadow direction and length constrain both hemisphere and rough time of day. On an outdoor image with no text at all, this family is often the only one left.
Before reasoning about pixels, check whether the file still carries GPS — the check here runs in your browser before anything uploads. Most social platforms strip it, but files sent by email, AirDrop or cloud link often keep it. When GPS is present you get the exact point, labelled as file data, and no AI runs at all. Open the free EXIF viewer
| Standard | Reliability |
|---|---|
| Readable local text (street, shop, transit) | Highest — can close a case alone |
| Traffic side, plates, road markings | High for country, low for city |
| Distinctive architecture or a named business | High when the style is regional, not generic |
| Vegetation, terrain, sun angle | Medium — brackets a region, rarely a street |
| Global brand signage, generic interiors | Lowest — present everywhere, proves nothing |
No metadata left in the file at all? The no-EXIF walkthrough
Ranked candidates are leads, not findings. Nothing on this page is a substitute for confirming the location yourself — see the workflow below.
Cheapest falsifiable step first
Which OSINT tools you open matters less than the order you open them in. Run the cheapest step that could disprove your hypothesis, and only escalate when it does not. This is the order that survives an editor, a client, or a court.
| Your situation | Start at | Why |
|---|---|---|
| Image came straight off a phone | 02 | GPS is probably still in the file |
| Image came off Instagram, X or TikTok | 03 | The platform stripped metadata on upload |
| Image is a screenshot | 03 | It never had camera metadata to begin with |
| Image is already published somewhere | 04 first, then 03 | A source page may name the place for free |
| You have a video, not an image | Extract keyframes, then 02 | Geolocate the frame, not the file |
A WhatsApp forward may be four re-compressions from the original. Ask for the file, or an email attachment, before you ask for anything else. Small sign text is the difference between a country and a street.
Ten seconds. If GPS survived, you are done and you have file evidence rather than an inference. The check runs in your browser here — nothing uploads until you ask it to.
Upload and let the model enumerate what it is reading. Record the clues, not just the answer — an unrecorded conclusion is not evidence, and a clue list is what lets someone else reproduce your work.
Take the top candidate and actively look for the thing that should be there and is not. A candidate that survives a genuine attempt to break it is worth publishing. One you only confirmed is not.
Every step above is reproducible by someone who does not trust you — that is the point of using OSINT tools this way.
The part vendors leave out
For image work, visual reasoning is strong on outdoor scenes with human infrastructure and weak on everything else — and no amount of model quality changes that. The evidence either is in the frame or it is not. When the frame is thin, this OSINT tool returns "not enough evidence" rather than a confident pin, because a plausible wrong answer costs an investigation more than no answer at all.
OSINT discipline
OSINT tools are legal to the extent that the collection is public and the purpose is authorized. That sentence carries more weight than most tool lists give it, and two of the three failure modes below are operational rather than legal.
Publicly reachable is not the same as lawfully usable. Journalism, corporate security, licensed investigation and research on your own data all sit comfortably inside OSINT. Using the same tools to locate a private individual who has not consented does not become acceptable because the data was easy to reach. Jurisdictions differ; get editorial or legal sign-off before publishing, not after.
A ranked candidate is a lead. An unverified lead published as a finding is how investigations — and reputations — come apart. Record the clue list, attempt to disprove the top candidate, and state your confidence level in the output. If you cannot show your work, you do not have a finding.
Investigators leak their own position constantly — publishing a field photo with GPS intact, or handing a source's original file to a third party. Clean the images you share, and prefer tools that process locally when the material is sensitive.
Nothing on this page requires an account, and uploaded images auto-delete within 24 hours. For genuinely sensitive material, use the in-browser metadata tools first — they never send the file anywhere.
Same engine, tuned
PAA answers
OSINT tools are software and services that collect and analyse publicly available information for investigations — username sweeps, domain and infrastructure recon, breach lookups, metadata extraction and image geolocation. They compress work you could do by hand; they do not replace the judgement about whether a result is actually true.
Working stacks of free OSINT tools usually start with OSINT Framework for orientation, Sherlock for usernames, theHarvester for domains, Have I Been Pwned for breach triage, ExifTool for metadata, SpiderFoot's open-source edition for automated recon, and a browser image tool like this page. Most investigators add one paid platform only when graphs or APIs are needed.
Yes. Of the OSINT tools on this page, the uploader at the top does exactly that. It reads signage, infrastructure, architecture, vegetation and sun angle, then returns ranked candidate locations with a confidence level and the clue list behind each one. It is free and needs no account.
No. These OSINT tools do not require EXIF. If GPS survived in the file you get the exact point instantly, labelled as file data. If it did not — which is normal, since most platforms strip it on upload — the visual clues are read instead. Screenshots, which never had camera metadata, work the same way.
Google Lens and TinEye look for copies of your image already online, then report where they were published. This OSINT tool reasons about what is inside the frame, so it can work on an image that has never been published anywhere. They answer different questions and it is normal to run both.
Collecting public information for an authorized purpose is legal in most jurisdictions and is standard practice in journalism, corporate security and licensed investigation. Using the same tools to stalk or harass, or to bypass access controls, is neither legal nor OSINT. Rules vary by country — get sign-off before you publish.
When you publish from OSINT tools, treat every candidate as a lead until you have independently confirmed it — typically on Street View or satellite imagery. Record the clue list alongside the conclusion so a reader can reproduce your reasoning. A paid unlock gives you the exact pin and a permanent report you can cite; the free analysis is enough to decide whether the lead is worth chasing.
Start from the artefact rather than the catalogue of OSINT tools. If you have an image, use this page. If you have a username, run Sherlock. If you have an email, check Have I Been Pwned. Browse OSINT Framework when you need to know what category a problem falls into. Add Maltego only once you are pivoting between enough entities that tabs stop working.
Uploads to these OSINT tools auto-delete within 24 hours and are never used to train the model. The metadata check runs in your browser before anything uploads at all, so for sensitive material you can read the EXIF without sending the file anywhere.
The rest of the OSINT tools map is below. This part you can use right now — free, no account, ranked places with the reasoning shown, in about thirty seconds.
Free · no sign-up · deleted in 24h · says "not sure" when it isn't
