OSINT (open-source intelligence) is the collection and analysis of publicly available information: websites, social media, public records and leaks. Attackers use it to prepare targeted attacks, and security teams use it to measure how exposed a company is.