Product
SpiderFoot
by Intel 471
- Product website
- http://www.spiderfoot.net/
- Documentation
- https://raw.githubusercontent.com/smicallef/spiderfoot/master/README.md
- Categories
- OSINT
Description
SpiderFoot Open Source automates open-source intelligence collection and analysis for reconnaissance and threat intelligence. Its modules connect data sources to investigate domains, IP addresses, people, and other targets through a web interface or command line.
AI-native score
How ready this product is for agents to use, on a 0–100 scale across four weighted dimensions. Security is one of them, so a high score is not a substitute for your own security or vendor-risk review. How is this scored?
Unrated. Only 38% of the scored decision fields are researched, so the grade is held until more are confirmed. The breakdown below shows what's been scored.
| Component | Raw | Weight | Contribution |
|---|---|---|---|
| Integration | 1/10 | 35% | 3.5 |
| Trust | 0/6 | 30% | 0.0 |
| Portability | 4/4 | 20% | 20.0 |
| Security | 0/4 | 15% | 0.0 |
Signals that fired
- Integration: Command-line interface (+1)
- Portability: Open standards (+1) ; No proprietary-SDK lock-in (+1) ; Self-hostable (+1) ; Open source (+1)
Signals not researched
These gaps cover the fields used in the AI-native score.
- Integration surfaces: llms.txt, Headless signup, Native connectors, Developer kits
- Trust & data policy: Trust center, Multi-factor authentication, Zero data retention, No generative AI training, Hard budget caps, Sandbox environment, Data export, Data import, Standard protocol access, Documented provider swap
- Security & compliance: Compliance certifications, Access controls
Trust & data policy
- Open standards
- Yes
- No proprietary-SDK lock-in
- Yes
- Self-hostable
- Yes
- Open source
- Yes
- Source code
- https://github.com/smicallef/spiderfoot
Not yet researched Trust center, Multi-factor authentication, Zero data retention, No generative AI training, Hard budget caps, Sandbox environment, Data export, Data import, Standard protocol access, Documented provider swap
What it does
Capabilities
-
View 3 productsInternet Asset Discovery
-
View 1 productOSINT automation
Jobs to be done
-
View 1 productAutomate OSINT reconnaissance
-
View 4 productsInvestigate threat infrastructure
-
View 4 productsMap external attack surface
Integration surfaces
How an agent connects to this product and finds its documentation. The largest dimension of the AI-native score (35%).
- WebMCP
- No
Command-line interfaces
Confirmed absent MCP servers , Agent2Agent (A2A) servers , API specs , Agent skills
Not yet researched llms.txt, Headless signup, Native connectors, Developer kits
Offers
No offers recorded.
Reviews
No approved reviews yet.
Catalog activity
Track how this entry changes as proposals are opened and merged.
Related products
Products from other publishers that share a job-to-be-done or category, most-shared first.
-
Same job: Investigate threat infrastructure (not assessed), Map external attack surface (not assessed)
-
Same job: Investigate threat infrastructure (not assessed), Map external attack surface (not assessed)
-
Same job: Investigate threat infrastructure (not assessed), Map external attack surface (not assessed)
Ready to decide?
Unrated · 38% researched. Grade withheld until more fields are verified.