OSINTverse
Sign in

Learning path

Learn OSINT in five stages, free first

This is the order we would give a friend who asked where to start. Each stage names the free resources that do the job, one paid upgrade and when it earns its price, and how you know you are done.

The materials belong to their authors. OSINTverse only ordered them. You can follow this path without any product of ours.

Start with stage 1Browse every resource

How the path is built

  • 01

    Free first, paid when it earns it

    Every stage can be completed without spending money. The paid upgrade is named with the moment it becomes worth it, not before.

  • 02

    Method before tools

    Tools change monthly. Documentation, verification, and analysis habits carry across every tool you will ever use, so they come early.

  • 03

    Practice is a stage, not a footnote

    Reading about pivots is not pivoting. The path puts timed, scored practice in the middle, where the gaps show.

  • 04

    Specialise by the job you want

    Journalists, threat intelligence analysts, and investigators diverge after the fundamentals. The last stage splits accordingly.

Five stages

The order, and what each stage is for

Free picks first in every stage. The paid upgrade is named with the moment it earns its price.

  1. Stage 1

    01

    Foundations and habits

    Understand what open-source intelligence is and is not, learn to document as you go, and run your first clean searches in a safe environment.

    Start with

    You are done when

    • You can explain the difference between collection and analysis in one sentence
    • You keep a running log of every query, source, and timestamp without being told
    • You have a separate browser profile or virtual machine for investigation work

  2. Stage 2

    02

    Core techniques

    Work one identifier type at a time: email, username, phone, image, domain. Learn to pivot between them and to validate what you find across sources.

    Start with

    You are done when

    • Given one email address, you can build a short, sourced profile and say what you could not confirm
    • You can name two false-positive traps for usernames and one for phone numbers
    • You can explain why a result from a commercial source still needs corroboration

  3. Stage 3

    03

    Scored practice

    Find your gaps under time pressure. Timed exercises with scoreboards tell you more than another month of reading.

    Start with

    You are done when

    • You have finished at least one timed CTF and written up what you missed
    • You can geolocate a street-level photo in a city you do not know, with a documented method
    • You stop when the brief is answered, not when the leads run out

  4. Stage 4

    04

    Analysis, evidence, and reporting

    Turn findings into something another person can check and act on. Learn the biases that catch analysts and the standards that make open-source evidence hold up.

    Start with

    You are done when

    • Your reports separate what you found from what you concluded
    • Every claim in a report points at a preserved source with a timestamp
    • You can name the two biases most likely to catch you, and the check you run against each

  5. Stage 5

    05

    Specialise by job

    Fundamentals are shared. The last stage depends on who you want to be useful to: a newsroom, a security team, an investigations desk, or a court.

    Start with

    You are done when

    • You can describe the questions your field asks of open-source work, and the ones it does not
    • You have joined one community where people in that job actually talk
    • You have a reading rhythm: one methods letter, one outlet, and the rest unsubscribed

FAQ

Questions, answered

Is this an OSINTverse course?

No. It is a suggested order through resources other people made, free first. We do not sell or host a course, and you can follow the path without any product of ours.

How long does the path take?

With a few focused hours a week, the first three stages take two to four months. Stages four and five are habits more than milestones, and most working analysts keep revisiting them.

Do I need to follow the stages in order?

Foundations and core techniques should come first. After that, pick the stage that matches the case in front of you and come back for the rest.

Where does practice on real data fit?

From stage two onwards. Use the free exercises and CTFs listed, and when you want to run real lookups across commercial sources, any desk will do, including ours.

Learned the method? Practise it on real data

The resources above teach the craft. When you want to run real lookups across breach, people, domain, and crypto sources without opening a dozen vendor accounts, that is what SearchIn is for.

Create free accountBack to the learning path
  • Free account, no card
  • Credits never expire
  • Refund unused balance in 7 days