What Is OSINT or Open-Source Intelligence

What is OSINT or open-source intelligence is an increasingly common question because this type of analysis has become highly visible in conflicts such as the war in Ukraine: it is the intelligence discipline that produces useful knowledge from publicly available information — press, social media, commercial satellite imagery, official records or flight data — without resorting to covert or classified means. Along with HUMINT, SIGINT, IMINT and GEOINT, it is one of the classic disciplines of the intelligence cycle.

Historical origins: from FBIS to BBC Monitoring

OSINT was not born with the internet. In 1941, the United States created the Foreign Broadcast Monitoring Service, the precursor of the later Foreign Broadcast Information Service (FBIS), to systematically listen to, transcribe and analyze foreign radio broadcasts, especially from the Axis powers. In parallel, the United Kingdom launched BBC Monitoring in 1939, based in Caversham, which during the Cold War became one of the most cited sources in the Western intelligence community for tracking press and broadcasting from the Soviet bloc. Both organizations demonstrated that the bulk of useful knowledge about an adversary can be obtained without classic espionage, simply through rigorous analysis of public sources.

OSINT's place in the intelligence cycle

The intelligence cycle — direction, collection, processing, analysis and dissemination — applies to OSINT just as it does to any other discipline, with one particularity: the volume of available information is so large that the main challenge is no longer accessing the data but filtering, verifying and prioritizing it. Agencies such as the CIA historically maintained the Open Source Center (heir to the FBIS) precisely for this function, acknowledging in their own reports that much strategic knowledge comes from well-worked open sources, not clandestine operations.

The intelligence disciplines (INTs)

• HUMINT: human intelligence obtained through sources and contacts.
• SIGINT: signals intelligence, interception of communications and electronic signals.
• IMINT/GEOINT: imagery and geospatial intelligence, including commercial satellites.
• OSINT: open-source intelligence, legally accessible to anyone.

The rise of OSINT with the social web

The mass adoption of social media, the geolocation of photos and videos, and the commercial availability of high-resolution satellite imagery (companies such as Maxar or Planet Labs) turned OSINT into a discipline practiced also by journalists, NGOs and citizens, not just governments. This shift gave rise to what some authors call collaborative or distributed open-source OSINT, exemplified by digital investigation collectives.

Bellingcat and the MH17 case

The Bellingcat collective, founded by Eliot Higgins in 2014, became a world reference for OSINT after its investigation into the downing of Malaysia Airlines flight MH17 over eastern Ukraine in July 2014. Through geolocation of photographs of a Buk missile launcher posted on social media, comparison with satellite imagery, and metadata analysis, Bellingcat traced the route of the weapons system from Russian territory to the crash site and back, work that was later corroborated by the Joint Investigation Team led by the Dutch prosecution service, whose November 2022 ruling convicted three defendants in absentia.

Since 2022, OSINT verification of images from the Russian invasion of Ukraine — attacks on civilian infrastructure, troop movements, use of particular weapons — has become standard practice for outlets such as The New York Times (Visual Investigations team) and organizations such as the Centre for Information Resilience, which cross-reference geolocated videos with satellite imagery to independently verify battlefield events.

Legal and ethical limits

OSINT works, by definition, with legally accessible information, but that does not exempt it from raising ethical problems: aggregating scattered personal data can reconstruct highly invasive profiles of individuals without their explicit consent to that combined use, a phenomenon academic literature calls the «mosaic effect». In addition, data protection regulations — such as the GDPR in the European Union — limit what commercial or profiling uses can be made of personal data even when it is public, and Bellingcat's own researchers have published internal guidance on responsible verification to minimize risks to people identified in conflict zones.