Private digital intelligence bureau Lawful OSINT — Cyber monitoring — Due diligence
Records specialists comparing provenance and evidential value across public sources
Editorial illustration

Open methodology data · 2026

OSINT source-reliability matrix.

A source is not reliable by category alone. This reference helps ask four repeatable questions while preserving the context, date and limitations of each item.

Four reading dimensions

Ask what the source can establish—not whether it looks convincing.

01Provenance
Can the origin and chain be identified?
02Independence
Is this genuinely separate from the claim?
03Freshness
Does its date fit the decision?
04Evidential value
What precise fact can it support?

Scores describe typical properties of a source type, not the automatic reliability of every document. Origin, date, scope and corroboration remain essential.

Interactive reference

Filter 32 source types by category and evidential value.

Results: 32

Institutional

Official register

Provenance
4 / 4
Independence
4 / 4
Freshness
3 / 4
Evidence
4 / 4

Existence, status, officers or filings within the register’s scope.

Caution: A register reflects its rules, date and submitted information; it does not prove every real-world activity.

Institutional

Published court decision

Provenance
4 / 4
Independence
4 / 4
Freshness
3 / 4
Evidence
4 / 4

Establish a decision, proceeding and published outcome.

Caution: Check jurisdiction, date, appeal status, anonymisation and exact scope.

Institutional

Public-authority publication

Provenance
4 / 4
Independence
3 / 4
Freshness
4 / 4
Evidence
4 / 4

Official position, alert, statistic or instruction within a defined field.

Caution: Separate observed data, institutional communication and recommendation.

First party

Company filing or report

Provenance
4 / 4
Independence
2 / 4
Freshness
3 / 4
Evidence
3 / 4

Statements, accounts, governance and events published by the entity.

Caution: Primary evidence of the statement, but interested in its interpretation.

First party

Official site or account

Provenance
3 / 4
Independence
2 / 4
Freshness
4 / 4
Evidence
3 / 4

Declared channels, offers, positions and operational information.

Caution: Verify the domain or account and preserve the dated version.

First party

Identifiable original document

Provenance
4 / 4
Independence
2 / 4
Freshness
3 / 4
Evidence
4 / 4

Establish the content of a statement or act at a given time.

Caution: Authenticate issuer, integrity, version and production context.

Editorial

Identifiable media with editorial process

Provenance
3 / 4
Independence
3 / 4
Freshness
4 / 4
Evidence
3 / 4

Context, attributed testimony, chronology and reporting.

Caution: Return to cited sources and distinguish reporting, opinion, wire copy and correction.

Editorial

Specialist publication

Provenance
3 / 4
Independence
3 / 4
Freshness
3 / 4
Evidence
3 / 4

Technical or sector context and expert interpretation.

Caution: Check expertise, method, funding and proximity to the subject.

Research

Scientific paper or methodical study

Provenance
4 / 4
Independence
3 / 4
Freshness
2 / 4
Evidence
4 / 4

Method, limitations, findings and state of knowledge for a defined question.

Caution: Check review status, sample, replication, date and fit to the case.

Archive

Web archive

Provenance
3 / 4
Independence
4 / 4
Freshness
2 / 4
Evidence
3 / 4

Show that a page or version was archived at a given date.

Caution: An archive may be incomplete and does not prove author, intent or every loaded resource.

Technical

Domain or certificate history

Provenance
3 / 4
Independence
4 / 4
Freshness
4 / 4
Evidence
3 / 4

Dates, technical relationships and visible changes in public infrastructure.

Caution: A technical relationship proves neither common ownership nor common intent.

Technical

Documented dataset or API

Provenance
4 / 4
Independence
3 / 4
Freshness
4 / 4
Evidence
4 / 4

Compare structured observations with explicit method, date and variables.

Caution: Check definitions, coverage, series breaks, licence and missing values.

Human source

Attributed direct witness

Provenance
3 / 4
Independence
3 / 4
Freshness
4 / 4
Evidence
2 / 4

Understand a lived observation and guide verification.

Caution: Memory, perception and witness interest require corroboration and context.

Social

Attributed social post

Provenance
2 / 4
Independence
2 / 4
Freshness
4 / 4
Evidence
2 / 4

Establish that an account displayed content at a given time.

Caution: Identity, actual author, context and account integrity may remain uncertain.

Social

Unsourced anonymous claim

Provenance
1 / 4
Independence
1 / 4
Freshness
3 / 4
Evidence
1 / 4

Identify a lead or narrative to verify, not a conclusion.

Caution: Do not attribute, republish or treat as fact without independent sourcing.

Tool output

Automated detector score

Provenance
2 / 4
Independence
2 / 4
Freshness
3 / 4
Evidence
1 / 4

Guide analysis when model, version and validity domain are known.

Caution: A score alone proves neither authenticity, manipulation nor origin.

Institutional

Public procurement notice

Provenance
4 / 4
Independence
4 / 4
Freshness
3 / 4
Evidence
4 / 4

Published subject, buyer, timetable and award within a procedure.

Caution: A notice does not prove delivery or outcome of the contract.

Institutional

Regulator decision

Provenance
4 / 4
Independence
4 / 4
Freshness
3 / 4
Evidence
4 / 4

Published finding or measure by an authority within its remit.

Caution: Check date, appeal status, scope and later corrections.

Technical

Public code repository

Provenance
3 / 4
Independence
2 / 4
Freshness
4 / 4
Evidence
3 / 4

History of files, versions and claims associated with a project.

Caution: A public account or repository can be copied, abandoned or misattributed.

Technical

Software package registry

Provenance
3 / 4
Independence
2 / 4
Freshness
4 / 4
Evidence
3 / 4

Published versions, declared maintainers and dependencies for a package.

Caution: A maintainer name alone does not establish real identity.

Technical

Certificate transparency log

Provenance
4 / 4
Independence
3 / 4
Freshness
4 / 4
Evidence
3 / 4

Dated certificate issuance and names covered at that time.

Caution: A certificate proves neither current ownership nor an active service.

Technical

Passive DNS history

Provenance
3 / 4
Independence
2 / 4
Freshness
3 / 4
Evidence
3 / 4

Observed domain, subdomain and address relationships over time.

Caution: Coverage varies by collector; shared addresses can create false links.

Editorial

Syndicated article

Provenance
3 / 4
Independence
1 / 4
Freshness
3 / 4
Evidence
2 / 4

Distribution and wording of a story carried by several outlets.

Caution: Identical republications are not independent corroboration.

Research

Platform transparency report

Provenance
3 / 4
Independence
2 / 4
Freshness
3 / 4
Evidence
3 / 4

Measures reported by a platform under its own method and period.

Caution: Examine the publisher’s categories, denominators and incentives.

Institutional

Vendor or authority security advisory

Provenance
4 / 4
Independence
3 / 4
Freshness
3 / 4
Evidence
4 / 4

Product, affected versions, mitigations and publication date in a notice.

Caution: A notice reflects its publisher’s known scope; it does not prove a particular asset is exposed.

Institutional

Official breach notification

Provenance
4 / 4
Independence
3 / 4
Freshness
3 / 4
Evidence
3 / 4

Facts, data categories and period reported by the responsible organisation.

Caution: An initial notice may be revised as investigation continues.

Research

Public ad library

Provenance
3 / 4
Independence
2 / 4
Freshness
3 / 4
Evidence
3 / 4

Creative, dates and displayed advertiser within a platform’s transparency scope.

Caution: The library may be incomplete and a displayed advertiser does not prove brand approval.

Technical

Original email headers

Provenance
3 / 4
Independence
3 / 4
Freshness
4 / 4
Evidence
3 / 4

Technical route and authentication results of a preserved message.

Caution: Successful domain authentication does not prove the request itself is legitimate.

Technical

Observed live DNS answer

Provenance
3 / 4
Independence
2 / 4
Freshness
4 / 4
Evidence
2 / 4

Publicly advertised address or service at a recorded observation time.

Caution: A current answer need not describe a past configuration or actual ownership.

Technical

Preserved original media file

Provenance
3 / 4
Independence
3 / 4
Freshness
3 / 4
Evidence
3 / 4

Content, format and metadata of a file received before known transformation.

Caution: Metadata may be absent or altered and does not establish authorship on its own.

Social

Platform review

Provenance
2 / 4
Independence
2 / 4
Freshness
4 / 4
Evidence
2 / 4

Experience or opinion attributed to an account in a given service context.

Caution: One review alone does not establish a real transaction, identity or coordinated campaign.

Editorial

Fact-checking article

Provenance
3 / 4
Independence
3 / 4
Freshness
3 / 4
Evidence
3 / 4

Published method, sources and reasoning for a specific claim.

Caution: The conclusion depends on the exact claim tested, available sources and publication date.

Method

How to use the matrix in a real case.

Begin with the fact to establish. A corporate register may be strong for a recorded officer but weak for current operational control; a direct witness may be fresh but still require independent corroboration.

Record the exact item, publisher, URL, consultation date, covered period and transformation applied. Then score the item—not the entire publisher—and explain why.

Use scores to expose disagreement and missing checks. Never average them into a certainty percentage.

FAQ

Use source categories without overclaiming.

Is an official source always true?

No. It is strong evidence of what the institution recorded or stated within its scope and date. It may still be incomplete, corrected or unsuitable for a different question.

Can the four scores be added together?

No. They are separate reading dimensions, not a universal reliability grade. A source can be fresh but weak as evidence, or authoritative but outdated.

Why are automated detector scores rated cautiously?

A detector answers a narrow model-dependent question. Without validation, version, media type and error context, its score cannot establish authenticity or origin.

Apply the method

A source matrix clarifies evidence. A scoped review connects it to the actual decision and remaining uncertainty.

Scope a review

Provenance, version and reuse

IIS editorial reference, not a statistical dataset. Recommendations and scores are case-dependent reference points, not scientifically validated measurements.

Dataset version: . Stable record IDs connect the bilingual JSON and CSV exports. Keep the caveats with each definition or recommendation.

Primary portals and their scope · Dataset reuse conditions