Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Business OSINT

Finding Acquisitions

  • You’ve profiled one entity under one name.

  • But targets run many brands, and parents absorb the companies they acquire.

  • Acquisitions = new apex domains = fresh, often forgotten attack surface.

  • Here: use corporate-OSINT to find a target’s acquisitions & subsidiaries, then pivot them into live domains. Example — Tesla.

LogoCrunchbase | Private Company Data & Predictive Intelligencewww.crunchbase.com
A business-analytics aggregator that tracks acquisitions, funding and sub-organisations
LogoMain PageWikipedia
the fastest human-readable map of a company’s structure.
LogoSEC.gov | EDGAR Full Text Searchwww.sec.gov
free database of US public-company filings

SEC EDGAR is the free database of US public-company filings. In every annual 10-K, Exhibit 21.1 — “Subsidiaries of the Registrant” — lists the company’s legal entities and their jurisdictions. This is the most authoritative list of entity names for reverse-WHOIS and registry pivots. Search the company (or CIK), open the newest 10-K, open the EX-21.1 exhibit.

LogoOpenCorporatesopencorporates.com
largest open database of companies, built from official corporate registries worldwide.
LogoThe Company Database | aiHit Datawww.aihitdata.com
PreviousRecon Frameworks
NextMetadata

Last updated