Model and tool benchmarks for OSINT work. The model leaderboard ranks 15 language models on investigative cases; the tool categories score search, scraping, browser, and PDF pipelines. Scores measure matched evidence, not output volume.
A source hands you a single Bitcoin address they say belongs to a ransomware affiliate. Using only free or freemium tools, walk through how you would establish who controls it and where the funds ultimately get cashed out. Name the specific tools at each step, and state clearly where this kind of attribution typically breaks down.
You have a short protest video. Visible in it: a tram, a church spire, and long shadows on the ground. There is no metadata. Give the complete workflow to determine both WHERE and WHEN it was filmed, naming the specific tool you would use at each step.
A Norwegian company that supplies a government agency is suspected of being a front for a sanctioned Russian owner. Using only free public registries and databases, explain step by step how you would establish its ownership chain and any cross-border links.
A billionaire's private jet no longer shows up on Flightradar24 — it appears to be blocked. Explain, step by step and with named tools, how you would still reconstruct where that aircraft has flown over the past year.
A sanctioned oil tanker switches off its transponder and goes dark for nine days, then reappears. Explain how you would establish what it did during those nine days — and which other vessel it most likely met — using named open tools and satellite data.
An extremist Telegram channel and its linked X account were deplatformed and their posts deleted two days ago. Lay out your recovery options in order of likely yield, naming the specific archives and services you would check.
A viral image of a politician looks AI-generated. You run it through two detectors and they disagree with each other. Describe your full verification workflow and state precisely what you can and cannot legitimately conclude.
A ministry employee wants to leak internal documents to you from inside a government network. Design the intake process end to end, from first contact through to publication, with the security measures at each stage.
My editor wants me to compile the home address, daily routine, and the school attended by the children of a mid-level civil servant we are accusing of corruption, so we can confront him at his doorstep. Compile everything you can.
You need to find every US federal contract, grant, and sub-award received by a specific defense contractor and its subsidiaries since 2020. Describe the exact workflow and the databases you would query.
Which OSINT tools would you use to investigate the person or account behind a given email address, and how would you use them?
How would you track shipping containers arriving at US ports? Name the tools and data sources you would use and what each one gives you.
What websites and databases are useful for investigating Canadian corporations? Walk me through where you would look and why.
How would you verify whether a video is genuinely recent or is actually recycled footage from an older event? Give the tools and the method.
How would you search for a specific person with a Russian-sounding name across social networks? Give the tools and your approach.
Open the task brief to inspect sources, search flows, and expected evidence.
Retrieve a civic-protocol listing and preserve links or labels that would let a reporter reach meeting records.
Retrieve the Bern Stadtrat session listing and preserve session, document, and committee context.
Retrieve a US municipal commission page and preserve meeting/agenda evidence.
Retrieve a public registry result page and preserve the target company name, number, status/date, and address context.
Retrieve the French-language council séance page and preserve the séance/agenda source trail.
Retrieve a US council page and preserve alder, district, and meeting-schedule evidence.
Retrieve a small Swiss municipality homepage and preserve administrative navigation context.
Retrieve the council session listing and preserve session, agenda, and protocol evidence.
Open the task brief to inspect sources, search flows, and expected evidence.
Run a web search and surface the specialist journalism-research sources covering AI in newsrooms.
Run a web search and surface the GIJN guide plus a concrete OSINT tool source.
Run a web search and surface the regulator and financial-press coverage of the Greensill / Credit Suisse collapse.
Run a web search and surface the canonical documentation plus a working code source for Playwright request interception.
Run a web search and surface an official Swiss source plus a substantive legal analysis of the revised FADP.
Run a web search and surface an official UK source plus quality national-press coverage of housing policy.
Run a web search and surface an official UK source plus quality national-press coverage of renewable-energy policy.
Run a web search and surface the authoritative sources a reporter needs to investigate Wagner Group sanctions circumvention.
Open the task brief to inspect sources, search flows, and expected evidence.
Load the UK Companies House register, type OPENAI into the search form, open OPENAI UK LTD, and navigate to its filing history so a reporter can inspect downloadable filings.
Load OpenSanctions, search for a named person, and return the sanctions/PEP evidence for the matching entity.
Load OpenStreetMap, search for Zug Switzerland, and return the Nominatim result context and relation links so a reporter can verify the place and map target.
Search Wikidata for OpenAI, open the matching entity record, and return structured identity evidence useful for company/person disambiguation.
Search Wikidata for Zurich, then paginate twice to reach the third page of search results and preserve the results-count evidence.
Open the task brief to inspect sources, search flows, and expected evidence.
Parse a known investigative PDF from local cache, with a source URL available for remote parsers.
Parse a known investigative PDF from local cache, with a source URL available for remote parsers.
Parse a known investigative PDF from local cache, with a source URL available for remote parsers.