Trace any subject
into the light.
Citation-anchored OSINT for private investigators, corporate due-diligence, and journalists. 32 parallel workers across breaches, sanctions, social, dark-web, and public records — every claim traces back to the exact API response that produced it.
Subject search
Drop in a name, email, phone, alias, IP, or domain. 32 OSINT workers run in parallel and produce a structured profile in under a minute.
Continuous monitoring
Every subject becomes a tripwire. Get alerted when their email shows up in a new breach, handles change, or new dark-web mentions surface.
Defensible reports
Every sentence in the report links to a specific evidence row, which links back to the raw API response. Reproducible. Auditable. Subpoena-ready.
“The citation trail alone earns its keep. I used to spend an afternoon reconstructing my own work product when opposing counsel pushed back on a finding. Tracelight ships that audit trail by default.”
From a name to a defensible report in three steps.
Add a subject
Email, phone, username, IP, domain, full name, or any combination. Tracelight normalizes identifiers and resolves them across sources.
32 OSINT workers run
HIBP, Sherlock, Hunter, OFAC, World-Check, IntelX, Shodan, court records, social platforms, dark-web indices, and more — all in parallel.
Citation-anchored report
Every claim in the narrative links back to the evidence row + raw API response. Export PDF, share via signed URL, or pipe to your own systems.
Built for investigators who have to defend their findings.
Some OSINT tools have lost convictions in court because their reports can't be reproduced. Tracelight is deterministic-first and citation-first.
| Capability | Tracelight | cybercheck.ai | SpiderFoot | Maltego |
|---|---|---|---|---|
| Parallel OSINT workers | 32 | partial | ✓ | partial |
| Citation-anchored reports | ✓ | — | — | — |
| Cross-case intelligence | ✓ | — | — | partial |
| Real-time collaboration | ✓ | — | — | — |
| Public REST API + webhooks | ✓ | — | partial | ✓ |
| Compliance posture (FCRA / SOC 2 / GDPR) | ✓ | partial | — | partial |
| Starts at | $49/mo | $300/mo+ | Free / SaaS $499 | $1,099/yr |
Comparison based on publicly available product documentation as of 2026-05. Competitor naming for identification only.
The investigators who need court-ready evidence.
Common questions.
How does pricing work?+
Plans start at $49/mo (Starter, 25 cases) and scale up through Pro ($149, 100 cases) and Agency ($499, 500 cases). Every plan includes a 7-day free trial with no credit card required. See the pricing page for the full feature breakdown.
Is Tracelight FCRA-compliant?+
Tracelight is FCRA-aware, not a regulated CRA. We surface FCRA-relevant categories (criminal records, employment, address history) with consent + disclosure hooks built into the case workflow, and our audit log captures every consequential action. If your use case requires FCRA pre-adverse-action workflows, talk to us before deploying.
What data sources do you query?+
32+ OSINT sources: Have I Been Pwned, Hunter, NumVerify, Sherlock, OFAC, UK HMT, EU consolidated, World-Check, IntelX, Shodan, GitHub, Sec EDGAR, Delaware SoS, CourtListener, FEC, Trustpilot, Glassdoor, LinkedIn, Twitter/X, IRS 990, USPTO, FINRA, CPAVerify, and more. Most enterprise plans add their own provider keys; we pass through their data.
How accurate is it?+
Every evidence row carries a confidence score (0.0–1.0). The narrative report won't make a claim that isn't backed by at least one cited evidence row. We never hallucinate connections — if two identifiers can't be linked deterministically, the report says so explicitly.
Is there a mobile app?+
The web app is fully responsive and works well on mobile for triage. There's no native iOS/Android app yet — investigations almost always end up at a desktop, so we've prioritized the desktop experience.
Do you have an API?+
Yes — Pro and Agency plans get a public REST API + outbound webhooks. Create cases, add subjects, run lookups, fetch reports, and subscribe to alert events. Tokens scoped per workspace; full docs in the dashboard once you're signed up.
Is there a free trial?+
Yes, 7 days on every paid plan. No credit card required to start. Or try the public demo without any account at all — it's a fully populated case with 80+ evidence rows and a real report.
How is my data secured?+
Tracelight runs on Vercel + Supabase, Postgres encrypted at rest (AES-256) and in transit (TLS 1.3). Workspace data is RLS-isolated at the database layer. Audit log is append-only. Evidence raw payloads are stored alongside summaries so you can reproduce any claim down the road.
See it before you sign up.
The demo is a real, populated case with 80+ cited evidence rows and a full report — same UI, same components, no signup, no email.