> For the complete documentation index, see [llms.txt](https://tools.osintnewsletter.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://tools.osintnewsletter.com/osint-tools/leakix.md).

# LeakIX

| **LeakIX**       | **Quick Overview**                                                                                              |
| ---------------- | --------------------------------------------------------------------------------------------------------------- |
| URL              | <https://leakix.net/>                                                                                           |
| What it does     | Scans and indexes exposed internet services to identify leaked data, misconfigurations, and vulnerable systems. |
| How to use it    | Search by domain, IP address, service, or organisation to discover exposed assets and potential data leaks.     |
| Cost             | Partially Free (advanced features may require paid access)                                                      |
| Account required | No.                                                                                                             |
| Cookies          | Temporary session cookie and a session authentication cookie.                                                   |
| Ownership        | Owned and operated by LeakIX SRL, a Belgian cybersecurity company.                                              |
| Use in Reporting | Supports identification of exposed infrastructure, leak exposure, and security misconfigurations.               |

### What does LeakIX do?

LeakIX is an OSINT and attack surface monitoring platform that continuously scans the internet for exposed services, misconfigured systems, and publicly accessible data leaks. It indexes findings so you can search for vulnerable or exposed assets tied to domains, IP ranges, or organisations.

**The lowdown:** It’s widely used for cybersecurity research, exposure management, and defensive security analysis, but can also surface sensitive information that requires careful handling and verification.

### How to Use:

**1. Enter a domain, IP address, organisation name, or service identifier into the search bar.**

<img src="/files/OUsoUck4J3jDJUF3YUjd" alt="" height="237" width="602">

**2. Review discovered assets such as exposed databases, misconfigured services, open directories, or leaked data endpoints.**

<img src="/files/dR9aSUC2M2FteigmcCcY" alt="" height="255" width="602">

**3. Validate findings using additional OSINT tools, confirm exposure status, and assess relevance and risk before reporting.**&#x20;

You can also [view this guide by Syberseeker here.](https://www.syberseeker.com/2023/10/investigating-leaks-and-vulnerabilities.html)

### Cost

* [ ] Free
* [x] Partially Free
* [ ] Paid

Advanced features may require paid access.

## Data Processing

### Account Required:

* [ ] Yes
* [x] No

### Cookies:&#x20;

The site uses: \_FLASH; a temporary UI cookie for showing one-time notifications, and LEAKIX\_SESSION;which maintains an authenticated user session on LeakIX.

### Use in Reporting

LeakIX is useful in reporting as it can:

* Identifiy exposed infrastructure and misconfigured services.
* Support cyber threat intelligence and attack surface analysis.
* Provide indicators of potential data leaks or insecure deployments.
* Help document exposure risk in organisations or domains.
* Prove useful for corroborating breach claims or vulnerability reports.

The platform is commonly cited in OSINT and cybersecurity reports as a supporting reconnaissance tool used to discover exposed services and validate attack surface exposure alongside platforms like Shodan and Censys.&#x20;

| **Capabilities**                                               | **Limitations**                                                 |
| -------------------------------------------------------------- | --------------------------------------------------------------- |
| Indexes publicly exposed internet-facing services.             | Not all findings represent confirmed security breaches.         |
| Detects misconfigured servers, databases, and applications.    | May produce false positives or outdated exposure data.          |
| Identifies potential data leaks and exposed endpoints.         | Coverage depends on scan frequency and indexing scope.          |
| Supports searching by domain, IP, or organisation.             | Sensitive results require careful, ethical handling.            |
| Provides historical and current exposure data.                 | Some features are restricted to paid tiers.                     |
| Useful for attack surface mapping and vulnerability discovery. | Doesn’t provide exploitation guidance or full forensic content. |

### Summary

LeakIX helps analysts identify misconfigurations and security risks across domains and infrastructure, best used in the collection phase of the OSINT workflow to access and maintain authenticated sessions for querying exposed asset data. As always, findings must be independently verified before inclusion in reports.

### Ownership

Owned and operated by LeakIX SRL, a Belgian cybersecurity company. The company was co-founded in 2021 by cybersecurity professionals Gregory Boddin and [Danny Willems](https://dannywillems.github.io/), with Willems also serving as the company's CEO.

### Ethical Considerations

* Treat exposed data as sensitive, even if publicly accessible.
* Avoid accessing or sharing personal or confidential information unnecessarily.
* Ensure compliance with relevant laws and organisational policies.
* Use findings strictly for defensive security and legitimate investigation.
* Verify exposures before reporting to avoid false attribution or alarm.

### Related Tools:

* [Shodan](/osint-tools/shodan.md)
* [Censys](/osint-tools/censys.md)
* SecurityTrails
* BinaryEdge

#### Sources

<https://leakix.net/>&#x20;

<https://leakix.net/about>&#x20;

<https://www.syberseeker.com/2023/10/investigating-leaks-and-vulnerabilities.html>&#x20;

<https://x.com/leak_ix?lang=en>&#x20;

<https://mastodon.social/@leakix>&#x20;

<https://www.linkedin.com/pulse/leakix-deep-dive-open-source-intelligence-platform-ryan-williams-ptevc/>&#x20;

<https://dannywillems.github.io/>&#x20;