🚀 Introduction

CompanyEnum is a powerful Open Source Intelligence (OSINT) framework designed to aggregate comprehensive data about companies from a multitude of public sources. For security researchers, corporate investigators, and market analysts, it automates the tedious process of data collection, providing a unified view of a company’s profile.

From corporate structure and financials to the technology stack and security posture, CompanyEnum gathers and presents information in a clean, structured format, allowing you to focus on analysis rather than data hunting.


🧠 How It Works

flowchart TB A[Input: Company Name] --> B{Data Collection Modules}; B --> C[Crunchbase API]; B --> D[Craft.co API]; B --> E["Security Scanners
(Headers, SSL, WHOIS)"]; B --> F["Review Platforms
(TrustPilot, Careerbliss)"]; C --> G[Data Aggregation & Normalization]; D --> G; E --> G; F --> G; G --> H[Generate HTML Report]; H --> I[View Report in Browser];

🎯 What CompanyEnum Aims To Do (High-Level)

CompanyEnum is built to automate the aggregation of open-source, public data about a target organization and present it via a Web UI dashboard. Its core goal is to reduce the manual overhead of crawlers, scripts, and spreadsheets into a unified interface for recon, triage, and reporting.


⚙️ Features

  • Comprehensive Data Aggregation: Gathers information from sources like Crunchbase, Craft.co, and various security tools.
  • Multi-Faceted Profiling: Builds a complete picture covering financials, people, technology, and public ratings.
  • Structured Output: Presents data in a clean, easy-to-read HTML report.
  • Security Insights: Includes results from security header scans, SSL certificate analysis, and WHOIS lookups.
  • People Intelligence: Identifies key personnel, including founders, executives, and board members.
  • Technology Stack Discovery: Enumerates web technologies, backend services, and provides estimates on IT spend.

🖼️ Example Output

Here is a sample of the data CompanyEnum provides in its HTML report. This demonstrates the breadth of information collected for a target company like “Microsoft.”


🧠 Data Explained

CompanyEnum organizes the collected intelligence into several key sections. Here’s a breakdown of what each section contains, based on the example output.


Summary

This section provides a high-level overview of the company.

  • Basic Information: Company Name, Website, Headquarters, Founders, and Founding Date.
  • Business Domain: Key sectors the company operates in.
  • Corporate Overview: A brief description of the company’s business.
  • Market Position: A list of known competitors.
Query: microsoft
Company Name: Microsoft
Website: microsoft.com
Headquarters: Redmond, Washington, U.S.
Founders: Bill Gates, Paul Allen
Founded Date: April 4, 1975
Sectors: Software, Cloud Computing, Consumer Electronics, Video Games
Description: Microsoft Corporation is an American multinational technology corporation...
Competitors: Apple, Google, Amazon, Oracle, Sony

Financials

This section dives into the financial and investment activities of the company.

  • Stock Information: Ticker symbol and current stock price.
  • Financial Health: Annual revenue.
  • Investment History: Details on funding rounds, investors, and the number of investments made.
  • Corporate Actions: Information on acquisitions and exits.
Ticker: MSFT
Stock Price: $305.22
Revenue: $211.9B
Fund Round: 1
Acquisitions: 251
Acquisitions Description: LinkedIn, GitHub, Activision Blizzard

People

Gain insights into the key individuals associated with the company.

  • Founders: The individuals who started the company.
  • Key Employees: A list of top executives and their roles, sourced from platforms like Crunchbase and Craft.co.
Founders:
Bill Gates, Paul Allen

Employees:

Satya Nadella: Chairman & Chief Executive Officer Brad Smith: Vice Chair & President

Technology

Understand the company’s technology footprint and security posture.

  • Tech Stack: The technologies used for their products and web services (e.g., Microsoft Azure, jQuery, React).
  • Intellectual Property: Number of patents and trademarks.
  • Web Presence: Monthly web traffic and IT spending estimates.
  • Security Posture: Results from security header analysis, SSL certificate validation (SSL Hopper, Sucuri), WHOIS data, and active scanning.
Tech Stack: Microsoft Azure, jQuery, React
Patents: 84,123
Web Traffic: 1.2B Monthly Visits
Security Grade: A
SSL Issuer: DigiCert Inc

Ratings

This section provides a view of the company’s public perception from both customers and employees.

  • Customer Reviews: Aggregated ratings and review snippets from TrustPilot.
  • Employee Reviews: Company culture and compensation insights from platforms like Careerbliss.

🛡️ Defensive Use Cases

While CompanyEnum is an OSINT tool, defenders can use it to:

  • Map External Footprint: Discover domains, subdomains, and public assets that may have been forgotten or are improperly configured.
  • Identify Information Leakage: Find sensitive metadata in public records, such as WHOIS data that isn’t properly redacted or developer emails in code repositories.
  • Baseline Security Posture: Get an attacker’s-eye view of your organization’s security headers, SSL/TLS configurations, and publicly exposed technologies.
  • Audit for Brand Impersonation: Monitor for newly registered domains that resemble your brand, which could be used for phishing attacks.