OpenOSINT

Free and paid

Separate three offers that were all visible on 17 Oct 2026. The software is MIT and `pip install openosint` is free, including commercial and closed-source use. The commercial page says a plan is not required for that use. Starter is €300 a year and includes a commercial-use agreement, a written license assurance letter, and best-effort email support. Business is €600 a year and adds priority email with a two-business-day response target, a named maintainer, and a basic indemnification clause. Enterprise is €1,000 or more a year, custom, and adds SLA documents, security and compliance documents, vendor onboarding, and optional purchase-order or net-30 terms. The homepage's coming cloud, from $0.02 per lookup, is a waitlist, not one of those euro tiers. OpenOSINT Monitor is free for one ownership-verified domain. Do not average the euro plans with the two-cent cloud rate. The homepage's “Enterprise custom” line is less specific than the commercial page's €1,000+ figure. Quote the commercial page for the floor.

The OpenOSINT README calls the project an agent for security researchers and analysts, with 21 investigation tools behind a natural-language interface, plus an MCP server. It says you can use it as a REPL, a CLI, an MCP server, or a browser web UI. The self-host block is `pip install openosint`, then `openosint` for the REPL, `openosint web` for the web interface, or a direct tool command without the model. The README also describes OpenOSINT Monitor at app.openosint.tech: weekly external checks of a domain's SPF, DKIM, and DMARC, TLS, security headers, and lookalike domains. It says the monitor is ownership-verified and free for one domain. The GitHub description still says 20 tools. Quote both numbers.

• 21 tools, or 20. The README and homepage say 21. The GitHub description says 20. Both were visible on 17 Oct 2026.
• MIT, then optional euros. Starter €300, Business €600, Enterprise €1,000+ per year. The license already allows commercial use.
• A coming cloud. The homepage says the hosted API is coming, from $0.02 per lookup. That is not the support agreement.

1. 1

   Install with pip when you want the local agent. Read the commercial page only if procurement needs a vendor contract.

2. 2

   Quote 21 tools from the README or 20 from the GitHub description. Say which page you opened.

3. 3

   Treat a model summary as a lead. Open the tool result it cites.

4. 4

   Do not put the €300 plan and the $0.02 cloud rate in the same budget line. One is a support year. The other is a waitlist.

• Procurement says a commercial product needs a contract before anyone installs it. The OpenOSINT commercial page says the opposite about the software. MIT already allows personal, commercial, SaaS, and closed-source use, and buying a plan does not change that license. Starter at €300 a year is a commercial-use agreement, a license assurance letter, and best-effort email. Business at €600 a year adds a two-business-day response target, a named maintainer, and basic indemnification. Enterprise starts at €1,000 a year and is custom. Mail commercial@openosint.tech if legal needs that paperwork.
• A budget mixes the euro plans with the homepage cloud. On 17 Oct 2026 the homepage said OpenOSINT Cloud is coming, from $0.02 per lookup, with free Apify credit and a waitlist. That rate was not a checkout. OpenOSINT Monitor, described in the README, is a separate hosted check of SPF, DKIM, DMARC, TLS, headers, and lookalikes, free for one ownership-verified domain at app.openosint.tech. Keep the three offers in three lines.
• The agent writes a paragraph over a tool result. The README says the audience is authorized security research, and nine of the 21 tools need an API key from someone else. A summary is a lead until you open the tool output. The README and homepage say 21 tools. The GitHub description says 20. Release v2.36.0 was published 15 Oct 2026, with 1,766 stars and 280 forks on the API the next review day. The public demo asks for authorization and a key. It is not a result this listing can show.

Hard cases

The case where the first result is easy to over-read.

Questions

Titled sources. These public pages are what the quotes on this listing come from.