Identity (rapid triage)
Search a selector such as a name, username or email and verify and enrich the results quickly. The vendor pitches it as "search key data and verify results in seconds."
ShadowDragon OSINT Review: Horizon, SocialNet and Alternatives
ShadowDragon OSINT software is built for government and enterprise investigators: the Horizon platform and the SocialNet API search, link and monitor publicly available data about people, accounts and networks. This review is based on the vendor's documentation and reputable coverage, checked on 10 October 2026.
- Horizon: Identity, Investigate, Monitor
- SocialNet API
- Quote-only pricing
- Government and enterprise buyers
Short answer
ShadowDragon OSINT is a commercial investigation suite: the Horizon platform (identity search, link analysis and monitoring) plus the SocialNet API for social media and online-identity data. It is sold to law enforcement, government, corporate security, fraud, finance and cyber threat intelligence teams. Pricing is not published; buyers speak to sales for a quote. It suits trained investigators, not casual users.
What Is ShadowDragon OSINT?
A suite of commercial investigation tools that automates the collection and linking of publicly available data, sold to public-sector and enterprise investigation teams.
ShadowDragon launched in 2016, founded by Daniel Clemens after his security consulting firm Packet Ninjas (ShadowDragon, About). In December 2021 the private equity firm Sverica Capital Management made a growth investment in the company, with Clemens staying on as founder and CEO (PrivSource deal record).
The current product line has two parts. Horizon is described by the vendor as an "enterprise investigation platform specializing in open source intelligence" and is split into Identity, Investigate and Monitor. SocialNet is the social media and identity data engine, sold as an API and built into Horizon (ShadowDragon, Platform).
Listed customer groups are law enforcement, government, corporate security, fraud and risk, finance and insurance, and cyber threat intelligence. The vendor states it holds a SOC 2 Type II report (ShadowDragon).
Horizon and SocialNet: Key Features
Three Horizon modules cover fast identity lookups, link analysis and ongoing monitoring; SocialNet supplies social and identity data to Horizon and to other systems through an API.
Investigate (link analysis)
Map data points on a graph and visualize the networks that connect accounts, identities and organizations.
Monitor (ongoing analysis)
Track subjects, keywords or topics over time across public sources, with alerts and historical context.
SocialNet API
Social media investigation data for mapping aliases, identities and relationships, usable inside Horizon or in a customer's own tools and workflows.
Partner ecosystem
Named partners include Authentic8, TRM Labs, OpenCorporates, Blackdot Solutions, Ontic and CACI. SocialNet transforms have also been offered inside Maltego.
Free browser tools
A dork assistant, email permutator, image forensics and other small tools, free and separate from Horizon.
Data Sources and Coverage
ShadowDragon says it collects from public sources at very large scale but does not publish a source list; independent reporting in 2025 described a list of more than 200 sites SocialNet draws on.
The vendor describes coverage in broad terms: Horizon "automates data discovery and enrichment across millions of public sources" (Horizon page), while the home page speaks of "billions of public sources." It also states that its collection does not rely on "invasive scraping, credential misuse, or exploitation" (ShadowDragon). No full list of sites or platforms is published, so buyers should ask for one during evaluation.
The best public view of SocialNet's reach comes from journalism. In March 2025, 404 Media reported that it had obtained a leaked list of more than 200 sites that SocialNet pulls data from, ranging from large social networks to niche communities (404 Media).
ShadowDragon Pricing and Plans
ShadowDragon does not publish prices; Horizon and the SocialNet API are sold through sales conversations and quotes, and only the small browser tools are free.
| Product | Published price | How to buy |
|---|---|---|
| Horizon platform (Identity, Investigate, Monitor) | Not public | "Speak with our team" demo and quote (Platform) |
| SocialNet API | Not public | Through ShadowDragon sales (SocialNet) |
| Free OSINT tools | Free | In the browser on the vendor's site (Free tools) |
| For comparison: Maltego | Free Basic plan; Entry €3,000 and Professional €7,500 a year; Enterprise on request | Self-serve or sales (Maltego pricing) |
Prices checked 10 October 2026. We found no published price or trial for Horizon, so we do not quote buyer estimates here.
When requesting a quote, ask how licenses are counted, whether monitoring is extra and which sources are included.
Who Should Use ShadowDragon for OSINT?
Teams that run investigations every week, have trained analysts and need social media and identity data in one workspace; it is too much for occasional or one-off questions.
It suits:
- Law enforcement and government units that investigate online accounts, networks and cyber-enabled crime as a routine part of casework.
- Corporate security, fraud and trust-and-safety teams that need to triage selectors fast and keep watch on threats over time.
It does not suit:
- Organizations with a few investigations a year: an annual enterprise license and analyst training rarely pay off at that volume.
- Buyers who need a finished, defensible report rather than raw search results and graphs. The software collects; people still have to verify, interpret and write.
Limitations and Risks of OSINT Platforms Like ShadowDragon
Automated matching can link the wrong people, platform terms and privacy law limit how the data may be used, and government use of SocialNet has drawn public criticism that buyers should be aware of.
- False positives. Selector searches and automated enrichment can merge two people with the same name or username. Every match needs independent confirmation.
- Privacy law. Public availability does not remove data protection duties. Under the GDPR, processing personal data needs a lawful basis such as legitimate interests, and the data must be limited to what the purpose requires (GDPR; EDPB guidance on legitimate interest).
- Platform terms. Data protection authorities have warned that scraping social media can breach both privacy law and platform terms (joint statement on data scraping). Ask the vendor how each source is collected.
- Reputation. In 2025, 404 Media reported on SocialNet's use by a US immigration agency, and the Mozilla Foundation later campaigned for websites to block tools like SocialNet (404 Media; Mozilla Foundation).
ShadowDragon Alternatives
Other commercial OSINT platforms cover similar ground with different emphases: link analysis, social media data, public-records reports, or AI-assisted analytics.
Maltego
Graph-based investigation platform with a free Basic plan and paid plans from €3,000 a year, plus third-party data integrations.
Maltego review →Social Links
SL Crimewall investigation platform, an API and Maltego add-ons drawing on social media, messengers, blockchains and the dark web.
Social Links review →Skopenow
Automated entity search, link analysis and location analytics for security, insurance, legal and public-sector teams.
Skopenow review →Babel Street
Data analytics for national defense, law enforcement and enterprise clients, now pitched as governed AI agents on rights-cleared data (Babel Street).
Babel Street review →LifeRaft
Intelligence platform for protective and threat intelligence teams that triages online signals (LifeRaft).
LifeRaft review →Need the Answer, Not the Tool?
If you have a handful of questions rather than a standing investigations team, an analyst-led service is usually faster and cheaper than licensing and learning a platform.
A platform license buys access to data, not answers. Many buyers need one result: who is behind an account, or whether a network of profiles is coordinated. That is the work of our OSINT investigations and social media investigations teams, and of OSINT monitoring when you need ongoing watch rather than a single report.
We quote a fixed price after written scoping, deliver focused checks from 10 business days, and every report is reviewed by a senior analyst before it reaches you. Urgent delivery is available for a 50% surcharge. See the full range of OSINT services, or compare tools by task in our OSINT tools catalog.
Get Findings Without Licensing a Platform
Send us the question, the subjects and your deadline. We scope it in writing and return a fixed quote.
ShadowDragon OSINT FAQ
Our fraud team keeps hearing about ShadowDragon OSINT tools at conferences — what does ShadowDragon actually do, and is Horizon a single product or a bundle of separate modules?
ShadowDragon sells commercial OSINT investigation software, and Horizon is one platform with three modules. Identity handles fast selector searches and verification, Investigate provides link analysis and network graphs, and Monitor tracks subjects, keywords or topics over time with alerts. The SocialNet API supplies social media and identity data, both inside Horizon and to other systems (ShadowDragon). The company was founded in 2016 and sells mainly to law enforcement, government and enterprise security teams.
I need to budget for next year and can't find a ShadowDragon price list anywhere — how much does Horizon or SocialNet cost, and is there a free trial I can use first?
ShadowDragon does not publish prices or advertise a free trial for Horizon or SocialNet; the website directs buyers to speak with the sales team for a demo and quote. Only a set of small browser tools, such as a Google dork assistant and an email permutator, is free. For budgeting, ask how licenses are counted, whether monitoring is extra, and what training is included. As a reference point, Maltego publishes paid plans at €3,000 and €7,500 a year.
We're a mid-sized law firm that runs maybe five online investigations a year — would licensing ShadowDragon make sense for us, or is it built for bigger teams?
At five investigations a year, a license is unlikely to pay off. ShadowDragon is designed for government and enterprise teams that investigate continuously and have trained analysts to run searches, check matches and maintain monitoring. A law firm with occasional matters usually gets better value from an analyst-led investigation scoped to each case, with a report written to evidential standards. That also avoids the training, contract and data-handling obligations that come with an enterprise platform.
I read press coverage saying SocialNet pulls data from hundreds of websites for government agencies — is it legal for a private company like ours to use the same kind of tool?
Using a commercial OSINT tool can be lawful, but legality depends on your purpose and how you handle the data. Under the GDPR you need a lawful basis, such as legitimate interests, and you must limit collection to what the case needs. Platform terms can also restrict scraping. In 2025, 404 Media reported a leaked list of more than 200 sites SocialNet draws on, which drew criticism from privacy groups. Document a clear purpose for each search and avoid profiling people without one.
Our security team already pays for Maltego — can we plug ShadowDragon's SocialNet data into it, or would we have to switch platforms completely to use it?
You may not need to switch. Maltego has offered ShadowDragon's SocialNet transforms inside its graph tool (Maltego), and ShadowDragon describes SocialNet as an API that also supports integrations and custom workflows. Confirm with both vendors which transforms are available today and how they are licensed.
If our analysts use ShadowDragon to link an anonymous account to a real person, how reliable is that match, and could we rely on it in a dispute or tribunal?
Treat any automated match as a lead, not a finding. Tools that link usernames, emails and profiles can merge different people who share a name or handle, so each link needs independent corroboration from a second source. For a dispute, findings also need preserved captures with timestamps and a clear method that another analyst could repeat. A platform shortens the search; it does not replace verification, documentation and a written analytical judgment.
Sources and Notes
- ShadowDragon: home page
- ShadowDragon: About
- ShadowDragon: Horizon platform
- ShadowDragon: Horizon modules
- ShadowDragon: SocialNet
- ShadowDragon: free OSINT tools
- PrivSource: Sverica Capital Management invests in ShadowDragon
- Maltego: SOCMINT investigations with Maltego and SocialNet
- 404 Media: The 200+ sites an ICE surveillance contractor is monitoring (March 2025)
- Mozilla Foundation: No data for surveillance tech campaign
- Maltego: pricing
- GDPR (Regulation (EU) 2016/679)
- EDPB: guidelines on legitimate interest (summary)
- Joint statement on data scraping by data protection authorities
Sources checked 10 October 2026. Figures about third-party firms and tools are as published by them or by the cited source on that date.