Whenever I’m tasked with an open-source intelligence (OSINT) engagement, I feel a mix of excitement and anxiety. I’m excited because no two engagements are the same—whether it’s an employee background check, a contract breach, or a theft investigation. But I also feel anxious because, what if I can’t find anything?
This fear initially led me to conduct the investigation before providing a quote—a poor business model. As an accountant, I should know better! Over time, I’ve accepted that not every investigation will yield results or uncover exactly what the client desires.
What Is Open Source Intelligence?
Open-source intelligence is exactly what it sounds like: publicly available information that can be gathered, analysed, and turned into actionable intelligence. Over the years, I’ve honed my skills in OSINT, but even with expertise, challenges arise. If someone has strong operational security practices, it can be difficult to uncover enough artifacts to advance an investigation.
When this happens, it can be frustrating, but sometimes a lack of evidence can actually reassure a client. For example, if I’m conducting a reference check on a new company director and find nothing of concern, that’s a positive outcome. Similarly, in a fraud investigation—where I don’t have access to financial data—not finding evidence of lifestyle changes could indicate no wrongdoing.
Unfortunately, most clients engage my investigative services after they’ve been wronged. Establishing a connection between the wrongdoing and the suspects (assuming the suspects have been correctly identified) is often a critical element of the investigation. This is why I describe OSINT as an inexact science. I have multiple techniques, tools, and approaches at my disposal, but there’s no guarantee I’ll uncover what the client seeks.
Common Misconceptions About OSINT
There are several misconceptions about OSINT that sometimes lead to misunderstandings of what I do—and the value I bring to an investigation.
One common misconception is that if a client has uncovered some information on their own, I’ll inevitably find more. While prior findings can be a helpful starting point, they don’t guarantee additional discoveries. Sometimes, what the client has found is all there is to find, given the context and budget. In other cases, those initial findings can jumpstart the investigation, saving the client time and money.
Another misconception is that OSINT is as simple as pressing a button to uncover everything about someone. In reality, every investigation requires time, effort, and expertise. Even with extensive work, there’s no guarantee of uncovering actionable intelligence.
This lack of certainty can make OSINT feel like a poor investment when nothing of substance is discovered. I completely understand this perspective—if I hired an expert, I’d want some form of guarantee too. However, OSINT investigations are governed by three factors: effort, time, and budget. Of these, two are finite and controlled by the client. Yet, no matter how well these factors are balanced, they often don’t align with expectations.
Managing Expectations
I write this to help temper expectations and increase understanding of what OSINT investigations entail. Each engagement is unique, manual, and influenced by multiple factors that determine its success.
I take pride in uncovering hidden information and delivering results, but it’s essential to recognise that OSINT is not a perfect science. If you have questions about open-source intelligence or need assistance with an investigative matter, I’d be happy to help uncover the insights you need.
