exposed 0.1.0

Find what of your personal data is leaking online — via free, no-account public sources — then get one-click opt-out links to remove it.

exposed

Find what of your personal data is leaking online — then remove it.

exposed is a personal OSINT self-scan. Point it at your own name, emails, and usernames, and it checks free, no-account, no-API-key public sources to show where your information is exposed — then hands you one-click opt-out links for the data brokers holding it.

It only ever looks you up. No targets, no accounts, no keys, no data leaves your machine except the lookups themselves.

_{Example scan of a fictional identity — real output is color-coded by severity.}

What it checks

Source	What it finds
Gravatar	Is your email tied to a public profile (photo, name, linked accounts)?
Hudson Rock	Does your email/username appear in infostealer-malware logs?
GitHub	Is your email leaking through public commits or linked to a user?
holehe (optional)	Which sites have an account registered to your email?
Sherlock (optional)	Which sites have an account under your username?
Data brokers	Ready-made search + opt-out links for 25 people-search sites
Search dorks	Pre-built Google / DuckDuckGo queries to eyeball the rest

Install

pip install exposed              # core scan
pip install "exposed[full]"      # + holehe & Sherlock for the deeper account sweeps

Or from source:

git clone https://github.com/GreenHarvestDev/exposed.git
cd exposed
pip install -e ".[full]"

Usage

1. Copy the example config and fill in your own details:

   cp exposed_identity.example.json exposed_identity.json
   # edit exposed_identity.json
   

2. Run the scan:

   exposed                 # readable summary + saves exposed_report.json
   exposed --no-sherlock   # skip the slow username sweep
   exposed --json          # emit the full report as JSON (for your own UI)
   

Your exposed_identity.json and any *_report.json are git-ignored — they hold your PII and should never be committed.

Identity file

{
  "full_name": "Jane Q. Public",
  "emails": ["[e-mail]"],
  "usernames": ["janepublic"],
  "phones": ["555-123-4567"],
  "cities": ["Springfield"],
  "state": "OR",
  "aliases": ["Jane Doe"],
  "relatives": ["John Public"]
}

Everything is optional — provide what you want scanned. More detail = more thorough dorks and broker links.

Ethics & scope

exposed is a defensive privacy tool. It is designed to scan your own identity so you can reduce your attack surface and remove yourself from data brokers. Don't use it to profile other people.

All sources are public and free; the tool sends no data to any server it doesn't have to query for a lookup, and stores results only in the local report file you control.

Development

git clone https://github.com/GreenHarvestDev/exposed.git
cd exposed
pip install -e ".[dev]"
ruff check . && ruff format --check . && pytest

Tests are fully offline (network and external tools are mocked), so pytest runs in well under a second. See CONTRIBUTING.md — new source checks are welcome as long as they're free, need no account, and ship with a test.

License

MIT © 2026 GreenHarvestDev