🚀 Introduction
CompanyEnum is a powerful Open Source Intelligence (OSINT) framework designed to aggregate comprehensive data about companies from a multitude of public sources. For security researchers, corporate investigators, and market analysts, it automates the tedious process of data collection, providing a unified view of a company’s profile.
From corporate structure and financials to the technology stack and security posture, CompanyEnum gathers and presents information in a clean, structured format, allowing you to focus on analysis rather than data hunting.
🧠 How It Works
(Headers, SSL, WHOIS)"]; B --> F["Review Platforms
(TrustPilot, Careerbliss)"]; C --> G[Data Aggregation & Normalization]; D --> G; E --> G; F --> G; G --> H[Generate HTML Report]; H --> I[View Report in Browser];
🎯 What CompanyEnum Aims To Do (High-Level)
CompanyEnum is built to automate the aggregation of open-source, public data about a target organization and present it via a Web UI dashboard. Its core goal is to reduce the manual overhead of crawlers, scripts, and spreadsheets into a unified interface for recon, triage, and reporting.
⚙️ Features
- Comprehensive Data Aggregation: Gathers information from sources like Crunchbase, Craft.co, and various security tools.
- Multi-Faceted Profiling: Builds a complete picture covering financials, people, technology, and public ratings.
- Structured Output: Presents data in a clean, easy-to-read HTML report.
- Security Insights: Includes results from security header scans, SSL certificate analysis, and WHOIS lookups.
- People Intelligence: Identifies key personnel, including founders, executives, and board members.
- Technology Stack Discovery: Enumerates web technologies, backend services, and provides estimates on IT spend.
🖼️ Example Output
Here is a sample of the data CompanyEnum provides in its HTML report. This demonstrates the breadth of information collected for a target company like “Microsoft.”
🧠 Data Explained
CompanyEnum organizes the collected intelligence into several key sections. Here’s a breakdown of what each section contains, based on the example output.
Summary
This section provides a high-level overview of the company.
- Basic Information: Company Name, Website, Headquarters, Founders, and Founding Date.
- Business Domain: Key sectors the company operates in.
- Corporate Overview: A brief description of the company’s business.
- Market Position: A list of known competitors.
Query: microsoft Company Name: Microsoft Website: microsoft.com Headquarters: Redmond, Washington, U.S. Founders: Bill Gates, Paul Allen Founded Date: April 4, 1975 Sectors: Software, Cloud Computing, Consumer Electronics, Video Games Description: Microsoft Corporation is an American multinational technology corporation... Competitors: Apple, Google, Amazon, Oracle, Sony
Financials
This section dives into the financial and investment activities of the company.
- Stock Information: Ticker symbol and current stock price.
- Financial Health: Annual revenue.
- Investment History: Details on funding rounds, investors, and the number of investments made.
- Corporate Actions: Information on acquisitions and exits.
Ticker: MSFT Stock Price: $305.22 Revenue: $211.9B Fund Round: 1 Acquisitions: 251 Acquisitions Description: LinkedIn, GitHub, Activision Blizzard
People
Gain insights into the key individuals associated with the company.
- Founders: The individuals who started the company.
- Key Employees: A list of top executives and their roles, sourced from platforms like Crunchbase and Craft.co.
Founders: Bill Gates, Paul AllenEmployees:
Satya Nadella: Chairman & Chief Executive Officer Brad Smith: Vice Chair & President
Technology
Understand the company’s technology footprint and security posture.
- Tech Stack: The technologies used for their products and web services (e.g., Microsoft Azure, jQuery, React).
- Intellectual Property: Number of patents and trademarks.
- Web Presence: Monthly web traffic and IT spending estimates.
- Security Posture: Results from security header analysis, SSL certificate validation (SSL Hopper, Sucuri), WHOIS data, and active scanning.
Tech Stack: Microsoft Azure, jQuery, React Patents: 84,123 Web Traffic: 1.2B Monthly Visits Security Grade: A SSL Issuer: DigiCert Inc
Ratings
This section provides a view of the company’s public perception from both customers and employees.
- Customer Reviews: Aggregated ratings and review snippets from TrustPilot.
- Employee Reviews: Company culture and compensation insights from platforms like Careerbliss.
🛡️ Defensive Use Cases
While CompanyEnum is an OSINT tool, defenders can use it to:
- Map External Footprint: Discover domains, subdomains, and public assets that may have been forgotten or are improperly configured.
- Identify Information Leakage: Find sensitive metadata in public records, such as WHOIS data that isn’t properly redacted or developer emails in code repositories.
- Baseline Security Posture: Get an attacker’s-eye view of your organization’s security headers, SSL/TLS configurations, and publicly exposed technologies.
- Audit for Brand Impersonation: Monitor for newly registered domains that resemble your brand, which could be used for phishing attacks.