theHarvester
theHarvester: A free, open-source tool for domain reconnaissance with local history, scheduling, and API access. Ranked #8 of 19 in OSINT Tools by our editors (7.5/10); pricing: Free plan; best for free domain and organization reconnaissance.
At a glance
- Editor score7.5 / 10
- PricingFree plan
- Best forFree domain and organization reconnaissance
- Free planYes
- Paid fromFree
- Social source searchNo
- Facts checked24 Sep 2026
Where it wins
- Collects intelligence across search, certificate, DNS, code, and threat sources
- Normalizes findings and lets users review evidence and hostname changes
- Offers scheduling, a local REST API, and JSONL or SQLite exports
Where it doesn't
- Its verified focus is domain and organization intelligence, not social sources
- Setup and interfaces can vary as the project is rapidly updated
- Its documentation supports Linux installation; broader OS support is unverified
Our verdict on theHarvester
For early-stage reconnaissance in an authorized security assessment, theHarvester collects public-source intelligence about a domain or organization. It draws from categories including search engines, certificate transparency logs, DNS datasets, code repositories, and threat-intelligence platforms. Findings can include hostnames, email addresses, IP addresses, URLs, ASNs, people, and breach names. The project is open source and intended for targets an operator owns or has permission to test, making it a fit for security practitioners who want a focused collection tool rather than a general-purpose OSINT service.
Its practical depth comes from the workflow around collection: users can select discovery sources and capabilities for a run, then review normalized evidence and hostname changes in HarvestView, the local web interface. HarvestView also provides run history and schedules. Automation is available through an authenticated local REST API; normalized results can be exported as JSONL, while completed-run evidence can be exported as SQLite. Provider API keys and HTTP or SOCKS5 proxies are supported. These options suit teams that want to inspect or incorporate findings into their own process, though users should expect a locally operated tool and version-dependent interface details.
The published project information identifies Linux installation and local web/API access, and describes the project as rapidly updated, so installation and interface details may vary by version. Community support and documentation are the stated support channels. Choose theHarvester for free, source-based domain and organization reconnaissance with run review, scheduling, and export options. It is less suitable when the primary need is social-source collection or a managed service; the documented focus is narrower, and its supported setup should be checked against the intended environment before adoption.
Your product? Our editors can test theHarvester in depth and publish a review, labelled as paid · from $149/mo →
theHarvester pricing
theHarvester fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Social source search | No |
| Domain & IP lookup | Yes |
| Monitoring & alerts | Yes |
| Link analysis | Not verified |
| API access | Yes |
| Data export | Yes |
| Deployment | Self-hosted, Cloud |
| Platforms | Linux, Web |
| Support | Community, Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 24 Sep 2026 |
Alternatives to theHarvester
- IBM i2 Analyst’s NotebookA Windows desktop tool for charting connections, flows and events in investigations.9.2
- OWASP AmassA self-hosted OSINT framework for mapping internet-facing assets and relationships.8.8
- BuiltWithA technographic research tool for profiling websites and building technology-based lead lists.8.6
See all theHarvester alternatives →
theHarvester vs the competition
- theHarvester vs IBM i2 Analyst’s Notebook
- theHarvester vs OWASP Amass
- theHarvester vs BuiltWith
- theHarvester vs Censys Attack Surface Management
- theHarvester vs ViewDNS.info
- theHarvester vs Intelligence X
Compare theHarvester with any tool side by side →
Used theHarvester? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used theHarvester for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
theHarvester is listed in our OSINT Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/theharvester/"><img src="https://www.itechguides.com/best/badge/theharvester.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update