Octoprobe

What the premium is supposed to cover, in the site’s words, is the stack from day one: the licensed APIs, public records, facial recognition, team workspaces, guest sharing, and an audit trail. There is no free community edition and no public metered tier of the kind Intelligence X or OSINT Industries publish. A team does not buy the breach feed, the phone feed, and the face step as separate subscriptions inside this product.

This listing does not invent a seat price. Ask for the quote that matches the team, and ask which of the advertised APIs are actually in that contract. Octoprobe is a product of Redwing Technologies LLC, the company that publishes Osint Daily. The directory marks the listing as a related product from Redwing Technologies. It is not a paid sponsor slot, and it does not change sort order.

The site calls the sequence seed, expand, link, then collect and report. Each round is supposed to build on the last. The product suggests which new lead is worth opening next, so the analyst is not left with a flat list and no order. Expansion is per node. An email, a phone, a handle, a domain, or a photo opens its own layer rather than forcing the whole case through one more search box.

The source list, in the site’s own words, is “20+ premium APIs” plus public records and facial recognition. The APIs are grouped as breach intelligence, account discovery, phone intelligence, and digital infrastructure. Public records are named as court filings, corporate records, and financial disclosures. The site says those feeds are licensed and already wired in, so a team is not meant to keep a separate subscription for each one. This directory has not audited the vendor list behind that “20+”. Treat it as the company’s count, and ask on a demo which providers are in the contract.

The graph is the screen the product leads with. Nodes are the identifiers and the records. Links are the reason two nodes were joined. The site says duplicates get merged and noisy identifiers get filtered, and that a lead can be scored against the subject of the matter. Clicking a link is supposed to show why it is there. Layers can be toggled: infrastructure, phones, emails, accounts, media. That is the working surface. Pricing and the limits of a match are in the sections below, not in the graph itself.

Facial recognition is a step in that same surface. The site says Octoprobe finds usable faces in photos already in the case, searches the open web for matches, and parks every match on the graph. You choose which images are searched. The match waits for a person to review it. It does not skip that review and write a name on the node.

Beside the graph is the case file. The site describes matters, tasks, hypotheses, and watches in the same window. A hypothesis can sit next to the links that support it or cut against it. A watch re-runs selected sources on a schedule, for example a daily check of breach sources on the seed email. Pages can be captured while you work, with a source and a timestamp stored on the finding, because the page may not be there tomorrow. The export is a sourced report from a team workspace that also allows guest sharing. The site says the investigation keeps an audit trail of what was done.

Two other intake paths matter if you already have material. You can import your own reports, disclosures, and lists and work them on the same graph as the licensed sources. And the site offers an MCP connection: an MCP-compatible client can call the same toolkit, with results written back to the investigation graph rather than left in a chat transcript.

Put the workspace next to the rest of the directory without pretending it replaces them. Maltego is the graph you draw, with transforms you choose one at a time. Octoprobe is a graph the platform draws from sources it has already licensed, including a face step Maltego does not ship as the product. ShadowDragon is the social-net suite sold to investigative teams. Skopenow is another paid people-and-records workspace. Intelligence X and DeHashed are where you go when the question is specifically what an archive holds. Sherlock, Maigret, and UserSearch.org still answer a username question for nothing. Have I Been Pwned still answers a narrow breach question without showing the stolen record. Octoprobe is the purchase when those separate answers need to land in one matter, with the evidence still attached.

A link on the graph is a lead with a cited source. It is not a finding you sign. Open the record, keep the capture, and write down what you actually checked.

A face match is not an identification. The site says you choose which photos are searched and that each match is saved for review. The analyst still has to open it. The product’s sample matter is labeled synthetic. The names, numbers, and records on that marketing screen are invented. Do not cite them, and do not treat a polished graph in a screenshot as a case you can copy.

octoprobe.com is a different company. That domain is an IoT network-security firm, associated with Arthur Donkers and Edwin Tiben. The OSINT platform in this directory is octoprobe.ai, from Redwing Technologies LLC. If a search result lands on the .com domain, it is not this product.

The “20+ premium APIs” figure is the company’s count. This directory has not verified each provider. Coverage, and what a given contract includes, is a question for the demo. A watch that re-runs breach sources is only as current as those sources. An imported spreadsheet is only as good as the list you brought.