ZeroTrace OSINT
Overview
A complete OSINT toolkit for investigators, privacy-first, license-locked, runs entirely on your machine.
ZeroTrace OSINT is a desktop investigation suite that puts eighty-plus reconnaissance tools, an investigation profile system, and a cross-tool pivot graph into one application. Every query runs on your machine. Every finding pins to a case file. Every report exports as a sourced PDF.
It is the toolkit a journalist, fraud investigator, due-diligence analyst, security researcher, or reporter reaches for when "a folder of screenshots in a Drive folder" stops being good enough.
Made for investigators. ZeroTrace OSINT is not a SaaS dashboard, not a web scraper, not a cloud service. It is a desktop application that runs locally, talks only to the public sources you choose, and never logs the queries you ran.
What you get
- Eighty-plus tools across network, web, identity, geolocation, files, hashes, crypto, proxy, system, encoders, and recon command builders.
- Investigation profiles, every finding pins to a named case file with full provenance.
- Cross-tool pivots, click any IP, domain, email, hash, or username and the toolkit shows you every other tool that takes it as input.
- Bulk paste mode, process hundreds of inputs at once on most tools.
- Command palette,
Ctrl+Ksearches every tool by name, tag, or category. - Export everywhere, JSON, CSV, Markdown, dark-themed PDF, clipboard.
- Local-first, your queries never route through ZeroTrace servers. License validation is the only outbound call to us.
- Made in Germany, built and operated under EU privacy law, no third-party analytics, no telemetry.
At a glance
The application groups its tools as follows (the documentation sections in the sidebar reorganise some of these for reading flow):
| Group | What it covers | Tool count |
|---|---|---|
| Network & IP | WHOIS, DNS, geolocation, ASN, reputation, exposure | 11 |
| Web Intelligence | Tech stack, subdomains, certificates, archive history, crawling | 20 |
| User & Account | Username sweeps, email analysis, phones, breaches, social-account lookups | 11 |
| OSINT Specials | Geolocation, threat-intel lookups, sanctions, news, crypto wallets, ID and VIN decoders | 17 |
| Utilities | Encoders, JWT, defang, timestamps, URL tools, user-agent parser, wordlists | 13 |
| Command Builders | Nmap, Gobuster, SQLMap, Sublist3r, Google Dorks | 5 |
| Hash & File | File hashing, hash identification, IOC extraction, image metadata | 4 |
| Proxy | Proxy parsing, validation, source scraping, traffic preview | 4 |
| Crypto | AES, HMAC, hash compute | 3 |
That is 88 tools in the in-app catalog, plus a VPN-detection and network self-test surfaced in the system tools.
Who it's for
Build a sourced case file with one tool per finding, then export a dark-themed PDF that an editor can verify line by line. Every finding shows where it came from.
Three privacy guarantees
- Your queries are your business. Every reconnaissance call goes from your machine to the public source you chose. ZeroTrace never sees what you searched for.
- No telemetry. No analytics SDK, no error reporter, no "anonymous usage data." If something fails, it fails on your machine.
- No subscription on the toolkit itself. A lifetime license is a one-time purchase. License validation is a periodic handshake, not a per-query call.
Every tool result shows which public sources contributed to it. If a finding rests on data from crt.sh, bgpview.io, or haveibeenpwned.com, that source is named on the result and carried into your exports.
Where to start
If you have just installed the toolkit:
- Day-1 walkthrough, first investigation profile in twenty minutes.
- Investigation workflow, the profile-pivot-export loop that makes the toolkit cohere.
- Keyboard shortcuts, the muscle memory that turns the toolkit from "useful" into "fast."
If you are sizing up the toolkit before buying:
- Network & IP Intelligence, the most-used category.
- People & Identity, the pivot-heavy category that distinguishes a toolkit from a search engine.
- Visual & Geolocation, the most asked-for OSINT capability across the industry.
License & access
ZeroTrace OSINT is delivered through your ZeroTrace Dashboard under the dedicated OSINT tab after purchase. Lifetime license, session-based activation, no per-query cost.
See Installation for platform downloads and license activation.