Employee OSINT

Employee OSINT is the collection of publicly available information about an organization’s people: names, job titles, email address formats, social media profiles and leaked credentials. Attackers use it to plan phishing and social engineering campaigns, while penetration testers and red teams use it to measure how exposed a company’s staff really are.

Learn the techniques, and how to reduce what your organization gives away, in our complete guide to OSINT and attack surface mapping. Gather only public information, respect privacy laws, and assess organizations only with authorization.