Umbragarde Confidential enquiry
Home/OSINT Tools
Open-source intelligence

The tools matter less than knowing where to look — and what to do with what you find.

A guide to the OSINT tools used in corporate and financial investigations: corporate registries, court databases, sanctions sources, beneficial ownership registers, leaked document databases and blockchain analytics — and where their limits lie.

Source-mappedWhat each category covers and what it systematically misses.
Jurisdiction-awareDifferent registries, different disclosure requirements, different gaps.
Practitioner perspectiveHow these tools are actually used in high-stakes investigations.
The toolkit

OSINT tools for corporate and financial investigation.

Open-source intelligence tools for corporate and financial investigation divide into several distinct categories, each covering a different type of information. Understanding what each category covers — and where each systematically falls short — is the starting point for using them effectively. The tools are free or commercially available; the methodology is what makes the difference between a database query and an investigation.

Corporate registry tools

Corporate registries are the foundational data source in any investigation involving companies. They record legal name, registration number, registered address, officer appointments and, in many jurisdictions, beneficial ownership information. Key sources:

  • Companies House (UK) — the most accessible and well-structured major corporate registry. Free public search, full filing history, PSC (Persons with Significant Control) data, accounts. The most useful starting point for any UK company.
  • OpenCorporates — aggregates company data from 140+ jurisdictions into a single searchable interface. Useful for identifying connections across borders and finding companies registered in obscure jurisdictions. Coverage quality varies by jurisdiction.
  • National registries — most major economies maintain their own online registries with varying levels of public access: Handelsregister (Germany), Registre du Commerce (France), Cyprus Registrar of Companies, and dozens of others. For high-risk CIS jurisdictions: Ukraine's Unified State Register (EDR), Russia's EGRUL and EGRIP. Quality and accessibility vary substantially.
  • GLEIF LEI Registry — the Global Legal Entity Identifier database covers entities that issue or trade financial instruments. Cross-jurisdictional, unique entity identifiers, parent-subsidiary relationships for many entities.

Beneficial ownership tools

Beneficial ownership data — who actually controls or benefits from a legal entity — is among the most valuable and least reliable category of OSINT data. Disclosure requirements and enforcement vary dramatically by jurisdiction:

  • UK PSC Register — Companies House's Persons with Significant Control register is self-reported but publicly accessible. Imperfect (false and nominee disclosures exist) but the starting point for UK beneficial ownership analysis.
  • EU Business Registers Interconnection System (BRIS) — cross-EU access to company information across member state registers. Beneficial ownership data quality varies by member state.
  • FinCEN BOSS (US) — the US Beneficial Ownership Secure System, operative since 2024 under the Corporate Transparency Act. Access is restricted to law enforcement and authorised financial institutions; not publicly searchable.
  • ICIJ Offshore Leaks database — the most comprehensive public resource for offshore beneficial ownership, containing data from the Panama Papers, Pandora Papers, Paradise Papers and other major leaks. Covers millions of entities and officers across offshore jurisdictions. Not exhaustive, but essential for any investigation involving offshore structures.
  • OpenOwnership Global Register — aggregates beneficial ownership data from jurisdictions that have published it publicly. Coverage expands as disclosure requirements spread globally.

Sanctions and PEP tools

Primary sanctions data is published directly by issuing authorities and is free:

  • OFAC SDN List — US Treasury's Specially Designated Nationals list, updated in near-real time. The primary US sanctions instrument. Downloadable in multiple formats; also searchable at sanctionssearch.ofac.treas.gov.
  • OFSI Consolidated List — UK's Office of Financial Sanctions Implementation list. Published and maintained by HM Treasury. Separate from OFAC post-Brexit.
  • EU Consolidated Sanctions List — maintained by the European External Action Service. Available via the EU Sanctions Map and direct download.
  • UN Security Council Consolidated List — the global baseline, applied by all UN member states. Narrower than regional lists.
  • Commercial platforms — World-Check (LSEG), ComplyAdvantage, Dow Jones Risk & Compliance and others aggregate primary lists and add PEP data, adverse media and entity matching infrastructure. Essential for compliance workflows; their source coverage and entity resolution quality determine their usefulness for investigative work.

Court record tools

Court records are among the most valuable and least systematically covered data sources in OSINT. Major tools by jurisdiction:

  • PACER (US) — Public Access to Court Electronic Records covers federal court filings across all US district courts, circuit courts and the Supreme Court. Coverage does not extend to state courts, which maintain separate systems of varying accessibility.
  • The Gazette (UK) — official public record for insolvency proceedings, court notices and regulatory actions in England and Wales. Essential for UK enforcement-related investigations.
  • CourtServe / Find Case Law — UK court judgment databases covering published High Court and appellate decisions. Commercial proceedings, freezing orders, judgments in enforcement actions.
  • CIS jurisdictions — Ukraine's Unified Court Registry (reyestr.court.gov.ua) covers Ukrainian civil and commercial proceedings. Russia's Arbitration Court database (kad.arbitr.ru) covers commercial disputes. Both are public and searchable, but require Cyrillic-language query capability.

Adverse media tools

  • Factiva (Dow Jones) — the most comprehensive licensed news archive for adverse media screening. 30,000+ sources in 200 countries and 28 languages. Strong English-language and major international press coverage; local-language regional coverage is thinner.
  • LexisNexis — strong legal and regulatory publication coverage alongside news. Particularly useful for court-reported adverse coverage and regulatory enforcement.
  • Google News and native search — direct access to sources not in licensed aggregators. Requires Cyrillic, Arabic or other language search for non-English subjects. Slower but reaches sources commercial platforms do not monitor.

Blockchain analytics tools

For investigations involving cryptocurrency — asset tracing through blockchain, sanctions compliance for virtual asset service providers, or source-of-funds analysis — specialist tools apply on-chain analytics to trace transaction flows:

  • Chainalysis — market-leading blockchain analytics for law enforcement and compliance. Traces Bitcoin, Ethereum and other major chains; entity attribution across exchanges and services.
  • Elliptic — strong compliance and investigation tooling, particularly for exchange-facing AML and transaction monitoring.
  • TRM Labs — cross-chain tracing with particular depth in DeFi and emerging chains; used by law enforcement in major crypto seizure cases.

Blockchain data is public and traceable by anyone — the value of these platforms is in entity attribution (connecting wallet addresses to real-world entities) and algorithmic detection of mixing and obfuscation patterns. See Umbragarde's crypto rail case study for how on-chain tracing integrates with conventional OSINT.

Tools versus methodology

The most common failure mode in OSINT-based investigation is mistaking tool access for investigative capability. Having a Companies House login does not make a PSC filing accurate; having Factiva access does not make a clean result meaningful for a high-risk CIS counterparty. What converts tool access into investigative output is methodology: knowing what each source does and does not cover, how to resolve entity ambiguity across jurisdictions, how to bridge gaps between structured sources with OSINT, and how to produce findings that are sourced, corroborated and defensible.

Umbragarde uses these tools as components of structured investigations. If you need access to a tool, these sources will serve you. If you need a finding — a corroborated, sourced, actionable answer to a specific question about a specific person, entity or structure — an enquiry is the starting point.

Common questions

OSINT tools, answered.

What OSINT tools are used in corporate investigations?

Corporate investigations draw on corporate registries (Companies House, OpenCorporates, national registries), beneficial ownership registers (UK PSC, ICIJ Offshore Leaks, FinCEN BOSS), court records (PACER, Gazette, CIS court databases), sanctions and PEP databases (OFAC, OFSI, EU consolidated list, commercial platforms), adverse media platforms (Factiva, LexisNexis), and blockchain analytics tools for crypto-related investigations.

What's the difference between tools and a managed investigation?

Tools provide access to data. A managed investigation applies methodology: knowing which sources cover which jurisdictions, how to resolve entity ambiguity and transliteration variants, how to identify nominees, and how to produce findings that are sourced, corroborated and usable in legal or compliance contexts. Tool access is the starting point; the investigation is what produces a defensible result.

Are OSINT tools sufficient for enhanced due diligence?

No. Tools are necessary but not sufficient. Enhanced due diligence requires an assessed, sourced analysis produced through a professional process — not a set of database results. UK MLR 2017 requires that EDD is proportionate to the risk: for high-risk counterparties, proportionate means covering the sources where material information actually exists, which requires judgment beyond tool access.

What are the best tools for beneficial ownership?

The UK PSC register (Companies House), ICIJ Offshore Leaks database, and OpenOwnership Global Register cover the most accessible public beneficial ownership data. For US entities post-2024, FinCEN BOSS contains Corporate Transparency Act filings but access is restricted. For offshore structures, the ICIJ databases from major leaks are often the only source of beneficial ownership data — formal registry disclosure is limited by design.

Related

OSINT tools in context.

Need investigation-grade intelligence, not just tool access?

One confidential message is enough. We take it from there.

Make a confidential enquiry