What is Recon by Lyon & Fiurex?

Recon is a free, browser-based OSINT (open-source intelligence) framework by Lyon & Fiurex LLC Group. It correlates a person or company across 39+ social platforms, GitHub, Gravatar, breach databases, email/phone/domain intelligence, company registries, certificate transparency logs and the Wayback Machine, then correlates the result into a chronological investigation timeline and exports Word reports.

Is Recon free to use?

Yes. All core people and company searches are free and run on Lyon & Fiurex's always-on house keys. You can optionally paste your own vendor API keys (HIBP, Hunter.io, People Data Labs, FullContact, Apollo.io, NumVerify, Skrapp.io, OpenCorporates, EmailRep) for higher quotas and your own attribution.

Do I need to install anything?

No. Recon runs entirely in your browser. There is no desktop client, no installer and no account required. Optional API keys are stored only in your browser's local storage and never persisted on the server.

How is Recon different from Maltego, Sherlock or Hunter.io?

Recon combines what Maltego, Sherlock and Hunter.io each do separately: username enumeration across 39+ platforms (like Sherlock), cross-source correlation into one investigation timeline (like Maltego) and employee-email discovery (like Hunter.io / Skrapp.io), all in a single browser-based workspace with one-click Word reports.

Which data sources does Recon use?

Recon queries 39+ social platforms, Wikipedia and Wikidata, GitHub, Gravatar, HIBP (Have I Been Pwned), EmailRep, People Data Labs, FullContact, Apollo.io, OpenCorporates, NumVerify, Hunter.io, Skrapp.io, Keybase, Hacker News (Algolia), RDAP, DNS (MX/A/NS/TXT), crt.sh certificate transparency, the Wayback Machine and reverse-image engines (Google Lens, Yandex, Bing, TinEye).

Can I export the investigation as a report?

Yes. Recon exports two Word (.docx) reports: a standard technical OSINT report and a GetMe-style psychological & lifestyle profile. Both are available in English, Spanish and French.

Does Recon work for searches in Canada and South America?

Yes. Recon supports people and company investigations across the Americas, including the United States, Mexico, Canada, Brazil, Argentina, Chile, Colombia and Peru. It ships national OSINT query packs for local company registries, gazettes, court records and directories per country, and the interface plus Word reports are available in English, Spanish and French — covering Canada's English and French markets and Latin American Spanish.

Is Recon legal to use?

Recon only queries public sources and public APIs. Like any OSINT tool, the legality of any specific investigation depends on your jurisdiction and the lawful basis for processing the subject's data (legitimate interest, contract, consent, court order, etc.). Always comply with GDPR, CCPA and local privacy law.

Recon for Enterprise — Tailored Intelligence Workspace

People search

Find a person online by full name, username, email, phone, city or country. Probe 39+ social networks in parallel, look up breaches in Have I Been Pwned, score email reputation with EmailRep, enrich identity with People Data Labs and FullContact, match avatars on Gravatar, and pivot to LinkedIn, Reddit, Facebook, news and family/colleagues graphs.

Company search

Investigate an organisation by name or corporate domain. Pull DNS records (MX, A, NS, TXT), RDAP registration data, certificate transparency subdomains from crt.sh, Wayback Machine history, Wikipedia and Wikidata facts, Apollo.io and OpenCorporates registry data, plus Hunter.io and Skrapp.io employee email discovery.

Who uses Recon

HR and pre-employment background-screening teams, recruitment and staffing agencies, law firms and legal due-diligence teams, private investigators, law enforcement agencies, cybersecurity companies, penetration testers and red teams, and cyber threat intelligence (CTI) analysts.

Use cases

Pre-employment background checks, candidate and recruitment screening, legal due diligence, skip tracing for private investigators, person-of-interest research, threat intelligence and CTI, attack surface management (ASM/EASM), red team and penetration-testing reconnaissance, bug bounty recon, fraud investigation, KYC and AML due diligence, investigative journalism, missing persons, brand monitoring, executive protection, incident response and SOC enrichment.