A Free OSINT Training Game Built on Real Investigation Technique

Open-source intelligence — OSINT — is the practice of piecing together publicly available information until a picture emerges that no single source revealed on its own. It's how real attackers profile targets before a phishing attempt, and it's the exact skill BREACH // NOIR was built to teach. Instead of slides and multiple-choice quizzes, you investigate fictional targets through a live case file, spend a limited budget of Intel Credits to pull sources, and reconstruct a password before your own digital footprint gives you away.

Why Gamified OSINT Training Works Better Than Slides

Most OSINT investigation training platforms are built around checklists: search this site, cross-reference that database, fill in the worksheet. It teaches the mechanics but rarely the instinct — the moment a trainee actually feels how three harmless-looking facts combine into a working password guess. A gamified OSINT training platform closes that gap by putting a real decision in front of you on every source: pull it and learn something, or hold your Intel Credits back for later. Every choice costs something, exactly like a real investigation does, which is what makes the lesson stick instead of just being reviewed once and forgotten.

This is also why an OSINT training game translates so directly into workplace awareness. The people who complete a BREACH // NOIR case don't just know that oversharing is risky in the abstract — they've personally reconstructed a password from a target's own social posts, and that's a much harder lesson to un-learn than a slide that says "don't overshare."

How Each Investigation Works

Every case starts the same way: a target, a starting Exposure score, and a locked set of Intel Sources — social profiles, leaked-data fragments, public records, the kind of material a real OSINT investigation training exercise would actually surface. Unlocking a source costs credits and raises your Exposure; the more aggressively you dig, the more likely the target notices something's wrong. Passive sources are always safe to review, so part of the skill is learning which leads are worth the risk and which aren't. Guess the password correctly before your Exposure maxes out or your credits run dry, and the case debriefs you with a full score breakdown, your investigation timeline, and — on tougher cases — a hidden ending for players who found an especially clean solve.

New agents start with The Streamer's Slip, a beginner-friendly case built to teach the core loop without punishing a first mistake too harshly. From there, cases scale in difficulty, and your progress — XP, level, titles, and a permanent leaderboard rank — carries across every investigation you complete. You can check the current leaderboard any time to see how your solves stack up.

Who Uses an OSINT Training Game Like This

Three groups get the most out of it. Security teams use it as a genuinely engaging piece of a broader awareness program — see our security awareness training game page if that's your primary goal. Students and career-changers use it as free, structured OSINT practice without needing a lab environment or paid course to get started. And a growing number of people just play it because reconstructing a stranger's password from their own digital trail is a genuinely good puzzle — the awareness lesson comes along for free. If your specific angle is password hygiene rather than OSINT generally, our password security awareness game page walks through that side of it in more depth.

What You Actually Practice

Reading a target's public footprint the way an attacker would, not the way a casual viewer would. Recognizing which small, individually-harmless details combine into a predictable password pattern — a pet's name, a birth year, a favorite team. Budgeting a limited investigation resource under pressure, which mirrors real reconnaissance far better than an open-ended search exercise does. And building the habit of asking "what does this piece of information cost me to expose?" before you ever unlock it — the same question a defender should be asking about their own footprint, just from the other side of the desk.

Getting Started

Registration is free and takes under a minute. Every new agent gets a starting Intel Credit balance that refills daily, so you can play the core loop indefinitely without spending anything. If you want to move faster through harder cases or unlock more sources in a single session, credit packages are available — see our pricing page for the full breakdown of what's free forever versus what's optional.

Frequently Asked Questions