SpiderFoot

SpiderFoot had very humble beginnings as a desktop application first released in 2005. It was quite popular even back then, despite only querying about five data sources and remaining untouched for years thereafter. It was born from the idea that having a single interface to aggregate information about your target would be very useful to security professionals, and it’s continued to evolve to the present day with the same motivation.

Today, a typical organization’s attack surface is distributed across on-premise infrastructure, multiple cloud platform services, SaaS platforms and–due to the increase in remote work–home devices and networks. Add to this the increasing number of services continually scanning the Internet and publicizing vulnerabilities found, plus services collecting and analyzing the almost daily data breaches being reported. We’re left with treasure troves of OSINT data waiting to be used for good or for harm.

Defenders (and red teams!) need tooling to find this data and make is understandable in ways that help them reason about the security posture of the target, whether it be their own organization, their client or their adversary.

That’s SpiderFoot’s mission.