Maltego

Industry-leading graphical link analysis and data visualization tool for OSINT investigations, enabling analysts to uncover hidden relationships between entities like domains, IP addresses, people, and organizations through an intuitive visual interface.

OSINT Link Analysis Data Visualization Threat Intelligence

Overview

Maltego is a comprehensive OSINT and forensic investigation platform developed by Paterva. It specializes in link analysis and data visualization, allowing security professionals, law enforcement, and intelligence analysts to map complex relationships between various data entities. The platform uses a graph-based approach where entities such as people, companies, websites, IP addresses, and social media accounts are represented as nodes, and their relationships are visualized as connecting lines. Maltego's power lies in its transforms, which are small pieces of code that query external data sources and automatically retrieve information about an entity. With over 100 built-in transforms and support for custom transforms, it can gather data from sources like DNS records, WHOIS databases, social media platforms, search engines, and public records. The tool supports both local and server-based deployments, with Maltego CE (Community Edition) available for free and Maltego XL for enterprise-scale investigations. Maltego offers two free Community Edition plans as of 2026, Basic available to everyone with 200 monthly credits, and Basic+ available to qualified users with 1,000 monthly credits and access to Maltego One for person of interest investigations. Key capabilities include domain and DNS reconnaissance, social network analysis, email tracing, IP geolocation, and corporate relationship mapping. Maltego integrates with third-party services like VirusTotal, Have I Been Pwned, and Shodan for enriched threat intelligence. The tool's visual interface enables rapid identification of patterns, anomalies, and potential threats, making it essential for cybersecurity teams, fraud investigators, and competitive intelligence analysts. The Maltego Transforms SDK enables organizations to connect internal systems, proprietary databases, and specialized data sources directly into Maltego Graph for investigation alongside built-in OSINT and commercial intelligence. Maltego Graph (Browser) version 2.19.0, released in June 2026, includes an AI Assistant with branching for user messages, credit usage tracking, and clickable URL properties in the Entity Details Panel.

Primary Use Cases

✔ Investigating cyber threats by mapping relationships between malicious domains, IP addresses, and known threat actor infrastructure to identify attack patterns and attribution.

✔ Conducting corporate due diligence and competitive intelligence by visualizing ownership structures, subsidiary relationships, and business connections across multiple data sources.

✔ Tracing digital footprints and social media connections for people of interest, including email addresses, usernames, and social network profiles to support investigations.

✔ Connecting proprietary and internal data sources through the Maltego Transforms SDK to enrich investigations with organizational intelligence alongside external OSINT feeds.

✔ Performing person of interest investigations using Maltego One with curated data sources and expanded investigation capabilities available through the Basic+ plan.

✔ Mapping social network relationships and connections across platforms like Twitter and LinkedIn to visualize who follows whom and identify mutual associates.

Frequently Asked Questions

Maltego is an OSINT and link analysis platform used by cybersecurity professionals, law enforcement agencies, fraud investigators, corporate security teams, and competitive intelligence analysts. It helps visualize and analyze complex relationships between entities such as domains, IP addresses, people, organizations, and social media profiles.

Transforms are small pieces of code that query external data sources and automatically retrieve information about an entity. When you right-click on an entity in Maltego (like a domain name), the transforms available for that entity type run queries against services like DNS, WHOIS, social media APIs, and threat intelligence feeds, returning new entities and relationships to the graph.

Maltego CE (Community Edition) is a free version with basic transforms and limited scalability, suitable for individual analysts and small investigations. Maltego XL is an enterprise-grade version that includes advanced transforms, unlimited graph sizes, server-based processing, and support for large-scale investigations with team collaboration features.

Yes, Maltego integrates with numerous third-party platforms including VirusTotal for malware intelligence, Have I Been Pwned for breach data, Shodan for device enumeration, and other commercial and open-source intelligence feeds through its transform system. Users can also create custom transforms to integrate with proprietary data sources.

Yes, Maltego offers a user-friendly graphical interface that makes it accessible for beginners, especially with the free Community Edition. However, to fully leverage its capabilities, users should understand basic OSINT concepts, data relationships, and be willing to learn about transforms and data sources. Maltego provides comprehensive documentation, tutorials, and training resources to help new users get started.

Metadata

Official Website Visit Website

Category Info

Open Source Intelligence (OSINT) tools for gathering and analyzing publicly available information from various sources including websites, social media, DNS records, public databases, and other open data sources for security investigations and threat intelligence.

Added On

August 18, 2026

Last Updated

August 18, 2026