The Best ZoomEye Alternatives in 2026

ONYPHE scans IPs and URLs at internet scale for attack-surface discovery, management and cyber threat intelligence.

Cisco Talos provides threat intelligence and directs reputation or categorization inquiries to its support site.

Criminal IP provides IP reputation analysis, attack-surface monitoring, fraud detection and threat intelligence.

Cisco Talos’ Intelligence Center provides IP and domain intelligence for threat detection.

Coordinate threat intelligence processing and analysis at scale with IntelOwl, an open-source project.

FOFA maps internet-connected assets so security researchers and organizations can search services, devices, and vulnerability exposure.

Shodan indexes internet-connected devices and services, with search tools for examining exposed infrastructure.

GreyNoise analyzes untargeted internet scanning and attack activity reaching servers connected directly to the internet.

Explore threat research, advisories, and security information published by FortiGuard Labs.

This OSINT Toolkit page groups Google and Bing search operators for web research, including queries for sites, links and trends.

Search Vulmon for vulnerabilities and exploits by product or vulnerability type, with recent CVEs and research posts.

rifteyy publishes malware and ransomware analysis reports, reverse engineering breakdowns, and security research.

Filesec.io tracks file extensions used by attackers and publishes updates for people following malware research.

Netlas provides technical information about IP addresses, domains, websites, web apps, IoT devices and other assets.

gofoss.net guides users through replacing Google, Meta, and Microsoft services with free and open source alternatives.

CertKit searches public certificate-transparency logs for certificates, subdomains and domain changes.

View Bitdefender’s map showing reported cyber threats and related activity.

Read Malwarebytes’ detection notes for PC Protect, a Windows system optimizer flagged as a potentially unwanted program.

Sector035 archives weekly OSINT news articles, with a collection of published issues and updates to the migrated archive.

LocalBitcoins has closed its Bitcoin trading service, according to the site notice.

Read Malwarebytes’ description of the PUP.IOBit detection, including its identification of potentially unwanted IObit software for macOS.

The MIT AI Risk Initiative produces authoritative data and frameworks to help you identify, prioritize, and manage the risks from AI.

This page warns users about counterfeit ReVanced sites and helps them identify official sources to avoid scams.

Read a report about GShade adding a computer reboot action after detecting a third-party updater, which its developer called anti-tamper behavior.