ClatScope — The Swiss Army Knife for OSINT Research
When I first needed to check if a corporate employee email appeared in data breaches, I spent half a day switching between a dozen services. ClatScope does the same in a couple of minutes — and that's just one of its 70+ features.
What Is ClatScope Anyway?
ClatScope is a Python OSINT (Open Source Intelligence) utility that combines the capabilities of dozens of specialized services into a single interface. The project author, Joshua Clatney (Clats97), positions it as a tool for:
- Penetration testers
- Cybersecurity professionals
- Private investigators
- HR specialists (candidate vetting)
- Investigative journalists
Fun fact: despite the project's youth (first release in January 2024), it already has 1.1k stars on GitHub and 11.6k downloads.
Top 5 Features That Impressed Me
-
Comprehensive Leak Check
- Checks email across Have I Been Pwned, Hunter.io, and Hudson Rock database in a single query
- Example:
python clatscope.py --email [email protected] --breach-check
-
Deep Username Recon
- Scans 250+ platforms for account presence
- Identifies linked profiles (Reddit, Twitter, Instagram)
-
Phone Number Analysis
- Identifies carrier and region
- Checks against breach databases
- Recognizes VoIP numbers
-
Automated OSINT Person Profile
- Collects open-source data by full name
- Builds connections between people and organizations
- Analyzes criminal history (for USA)
-
Quick Start with ClatScope Mini
- Simplified version without API keys
- Perfect for quick checks
How It Works Technically
Under the hood, ClatScope uses:
- Python 3.10+
- Integration with 15+ external APIs (Perplexity, Hunter.io, etc.)
- Modular architecture (each function is a separate module)
- Bulk operations support via CSV
Installation is straightforward:
git clone https://github.com/Clats97/ClatScope.git
pip install -r requirements.txt
Real-World Use Cases
-
For Incident Responders:
- When a corporate email is compromised — instantly check all employees for involvement in breaches
-
For HR Managers:
- Verify candidate data before hiring
-
For Journalists:
- Find linked accounts from leaks to establish a source's identity
-
For Administrators:
- Check IP addresses against blacklists
Caveats
- Full functionality requires paid API keys
- Some features (criminal checks) only work for the USA
- The subscription (from $9.99/month) includes key rotation and abuse protection
Verdict: Who Should Try It?
ClatScope is a must-have for:
- SOC/SIEM teams
- Ethical hackers
- Corporate security teams
If you regularly need to check digital footprints — install at least ClatScope Mini. For professional use, consider the subscription — it saves hours of manual work.
The project is actively developing: just in October 2025, there were 47 commits. I recommend forking the repository — what if the author adds something truly groundbreaking?
P.S. The author asks that you use the tool ethically — don't check your exes without their consent ;)
Related projects