+1 coinfor reading to the end
+1
Home / Glossary / OSINT
Glossary · Security

OSINT

Open-source Intelligence

In plain language

Information about a person or company gathered from public sources such as websites and social media.

The metaphor

Like reading everything pinned on a public noticeboard to learn who works here and what they are up to.

Going deeper

How it works

  • Attackers use it to make scams convincing.
  • Staff names, titles and photos on your site give them material.
  • Security testers use the same method.
  • Limit what you post about internal details.

What can go wrong (example scenario)

An attacker read a firm's website and found the owner's name, the bookkeeper's name and a post about being away on holiday. A fake email from the owner asking for a transfer followed that week.

How WILDCARD handles it

Phishing Training prepares staff for convincing messages built from public information.

In practice
  • A firm checks what a stranger can learn from its site.
  • A team avoids posting about travel in real time.
  • A tester maps a client's exposed details.

A question owners ask

Should I remove staff names from my website?

Not necessarily. Be aware that scammers use them, and train staff to verify requests.

Where WILDCARD handles this
Phishing
Training
  • Monthly phishing simulations
  • Quarterly self-paced training
  • Monthly reporting
Start with Phishing TrainingMeet Phishing Training →
Related terms
BECBusiness Email CompromiseCyber insuranceDeepfakeOut-of-band verificationPhishingQuishingSecurity awareness trainingSmishing

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →