What is OSINT Researcher?
OSINT Researcher is an Apple-platform app (iPhone, iPad, Mac, and Vision Pro) that searches public repositories across GitHub, GitLab, Codeberg, and Bitbucket Cloud in one query. It surfaces repos, contributor activity, and potential leaked secrets, and can compile findings into a PDF report. The app is aimed at security analysts, recruiters, and developers doing open source due diligence.
Why OSINT Researcher works
Investigating an org's code footprint usually means opening four browser tabs and reconciling different search syntaxes. By unifying multi-forge search, regex-based secret detection, and report generation in one mobile and desktop app, OSINT Researcher cuts the back-and-forth that makes ad-hoc OSINT painful and helps analysts produce an evidence trail without leaving the tool.
OSINT Researcher features
- Multi-forge search. One query spans GitHub, GitLab, Codeberg, and Bitbucket Cloud so an analyst sees an organization's full public surface without separate logins.
- Secret detection with regex. Built-in patterns plus a custom regex tester scan repos and gists for exposed API keys, tokens, and credentials.
- Activity insights. Commit heatmaps and account age signals help judge whether a repo or contributor is active or dormant.
- PDF report generation. Findings can be exported into a structured PDF so security or recruiting work product is shareable outside the app.
- Diff scanning across searches. Tracking changes between scans makes it easier to spot newly leaked secrets or new contributors over time.
Who OSINT Researcher is for
- Application security analysts doing pre-engagement recon on a target company who need leaked credentials and exposed repos surfaced quickly.
- Technical recruiters scouting open source contributors who want to evaluate real code and activity rather than a resume.
- Founders and competitive researchers studying a competitor's engineering footprint, hires, and OSS releases.
- Bug bounty hunters who want a mobile-friendly recon kit for triaging programs while away from a laptop.
Similar micro SaaS ideas you can build
- Secret leak monitor. Service for AppSec leads that watches an org's GitHub and gists for new credential leaks and pages on detection, billed per monitored organization per month.
- Engineering hire scout. Tool for technical recruiters that ranks open source contributors by language, recency, and project quality for a given role, sold per active search.
- OSS due diligence report. Workflow for acquirers and VCs that compiles a target company's public code activity, license posture, and contributor health into a deal-room PDF, priced per report.
