OSINT Statistics 2026
By Axis Intelligence Research
Co-author: Marcus Chen, Cybersecurity Correspondent | Last updated: June 30, 2026 | License: CC BY 4.
Quick Answer:
The global OSINT market sits somewhere between $8.7 billion and $22.95 billion in 2026 — depending entirely on which research firm you trust and, more critically, what they decided to count as “OSINT.” Axis Intelligence Research cross-referenced six published 2026 estimates and found a $14.25 billion spread, a divergence ratio of 2.64x. Applied to Mordor Intelligence’s government/defense share figure of 38.40%, that implies roughly $6.99 billion in government OSINT spend in 2025 alone — a derived figure that no published source states explicitly, but one that makes Mastercard’s $2.65 billion acquisition of Recorded Future look considerably less dramatic in context.
Key Findings
- The OSINT market in 2026 cannot be stated as a single number with any intellectual honesty. Axis Intelligence Research cross-referenced six published market-size estimates and found a gap of $14.25 billion between the most conservative ($8.7B, MarkWide Research) and the most expansive ($22.95B, The Business Research Company). The midpoint of those six estimates is $15.82 billion — but that midpoint reflects methodological disagreement, not market consensus.
- Government and defense agencies account for an estimated $6.99 billion in OSINT spend in 2025, according to Axis Intelligence Research’s cross-source calculation applying Mordor Intelligence’s disclosed government/defense sector share (38.40%) against that firm’s own 2025 market figure ($18.20 billion). This is the first time this figure has been published as a standalone derived statistic.
- Mastercard’s $2.65 billion acquisition of Recorded Future in September 2024 — confirmed in Mastercard’s SEC Form 10-Q — represents the largest OSINT-adjacent corporate transaction in the industry’s recorded history and the clearest signal that financial services now treats intelligence capability as a core infrastructure asset, not a security line item.
- SpyCloud’s 2026 Identity Exposure Report, published in March 2026, found 65.7 billion distinct identity records now circulating in the criminal underground — a 23% year-on-year increase — with 18.1 million exposed API keys and tokens, including credentials tied to AI tools, marking the first time machine identities have been identified as a primary OSINT attack target.
- Despite the growth of AI-powered defenses, IBM’s 2025 Cost of a Data Breach Report found that U.S. breach costs hit a record $10.22 million — a 9% year-on-year increase and the first time U.S. breach costs have crossed the $10 million threshold, even as the global average fell 9% to $4.44 million. The divergence between U.S. and global figures tracks the same gap that OSINT’s expanding role in threat detection has not yet closed.
The Axis OSINT Market Divergence Index (MDI)
This is the calculation that every vendor-sourced OSINT market report buries. Axis Intelligence Research cross-referenced six published 2026 market-size estimates from named research firms and computed the spread between the lowest and highest figure for the same calendar year.
Inputs: Six 2026 estimates, drawn from: MarkWide Research (OSINT Market 2026), Research Nester (2026 industry size assessment), Market Research Future (extrapolated at 20.65% CAGR from their 2025 figure of $11.75B), Global Market Insights (2026 projection from their 2025 valuation), Mordor Intelligence (2026 OSINT Market Report), and The Business Research Company (Open Source Intelligence Global Market Report 2026).
| Research Firm | 2026 Estimate | CAGR Used |
|---|---|---|
| MarkWide Research | $8.70B | 16.40% |
| Research Nester | $14.16B | 23.90% |
| Market Research Future | $14.18B | 20.65% |
| Global Market Insights | $15.90B | 26.70% |
| Mordor Intelligence | $21.06B | 15.62% |
| The Business Research Company | $22.95B | 27.00% |
| Axis midpoint (6 estimates) | $15.82B | — |
| Spread (high − low) | $14.25B | — |
| Axis MDI ratio (high ÷ low) | 2.64× | — |
What causes the $14.25 billion gap? Three scope decisions that each firm makes differently:
- Threat intelligence inclusion. Recorded Future is frequently classified as an OSINT company — and Mastercard paid $2.65 billion for it, confirmed in Mastercard’s SEC Form 10-Q filing in September 2024. Some firms count threat intelligence platforms in OSINT; others track them in a separate market. That single category decision shifts a market estimate by several billion dollars.
- Managed OSINT services vs. platform revenue only. Counting OSINT-as-a-service contracts (government and corporate outsourcing) alongside software revenue versus counting only platform subscriptions produces materially different totals at the same underlying spend.
- Classified government procurement. No research firm has direct visibility into classified intelligence contracts. Estimates of government OSINT spend range from “excluded entirely” to “estimated from public contract disclosures” — and neither approach is labeled clearly in the headline figure.
The MDI is Axis Intelligence Research’s original calculation. The individual estimates above come from named research firms; Axis computed the spread, midpoint, and ratio. The goal is not to discredit any individual estimate but to quantify the methodological disagreement that exists every time someone cites an OSINT “market size” without its source.
Axis Intelligence Research will update the MDI when updated firm estimates are published and will note any material change in underlying methodology. License: CC BY 4.0.
How Big Is the OSINT Market in 2026?
The honest answer is that the OSINT market is large, fast-growing, and poorly bounded. Published estimates for 2026 range from $8.7 billion to nearly $23 billion — a gap wider than many entire technology markets. CAGR projections cluster between 15% and 27% depending on the same scope assumptions that drive the size disagreement. The direction is not in dispute: more money, more vendors, more government procurement. The number is.
What you can state with confidence: the global threat intelligence market — which overlaps substantially with OSINT’s commercial upper end — sat at approximately $11.5 billion in 2025 by one estimate, growing toward $23 billion by 2030, according to MarketsandMarkets. Mastercard validated a specific data point in that range when it filed a Form 10-Q with the SEC disclosing an agreement to acquire Recorded Future for $2.65 billion. Recorded Future is not the whole threat intelligence market, but it is the largest named company in it. A $2.65 billion price on one vendor in a category implies something real about the category’s total size.
North America was the largest regional OSINT market in 2025. Asia-Pacific is the fastest-growing region, driven by satellite proliferation, security tensions, and sovereign AI investments, according to Mordor Intelligence’s 2026 report. That regional growth pattern is consistent across the firms that disaggregate by region, even when they disagree on the total.
Government and Defense OSINT Spending Statistics
U.S. Intelligence Community OSINT Spend
On October 25, 2024, Recorded Future announced its selection as a cornerstone partner for the ODNI’s Sentinel Horizon program. The program covers all 19 U.S. Intelligence Agencies, giving them access to Recorded Future’s finished intelligence reporting and analyst exchanges with the company’s Insikt Group. This was not a proof-of-concept or pilot. All 19 agencies. That’s the scale at which commercial OSINT now operates inside the U.S. intelligence apparatus.
It’s worth saying plainly: the U.S. Intelligence Community running its national security intelligence workflows through a commercial platform that Mastercard subsequently acquired for $2.65 billion is not a footnote about a software contract. It’s a structural shift in how intelligence is produced and by whom. The CIA’s internal Osiris tool — which uses generative AI to process unclassified data at scale — is a parallel development in the same direction: the government building capability on top of OSINT infrastructure rather than solely through classified collection.
According to Axis Intelligence Research’s calculation, applying Mordor Intelligence’s disclosed government and defense sector share (38.40%) against Mordor’s own 2025 OSINT market figure of $18.20 billion produces an implied government OSINT spend of approximately $6.99 billion in 2025. This is not a figure Mordor states explicitly — it is a derivation Axis Intelligence Research built from two numbers that Mordor does publish. The underlying inputs are Mordor’s; the calculation and its framing as a standalone figure are Axis Intelligence Research’s.
| Metric | Value | Basis |
|---|---|---|
| Mordor 2025 OSINT market estimate | $18.20B | Mordor Intelligence OSINT Market Report 2026 |
| Government/defense share | 38.40% | Mordor Intelligence |
| Axis derived government OSINT spend (2025) | ~$6.99B | Axis Intelligence Research calculation |
| Mordor 2026 OSINT market projection | $21.06B | Mordor Intelligence |
| Axis derived government OSINT spend (2026, projected) | ~$8.09B | Axis Intelligence Research calculation |
| Sentinel Horizon coverage | All 19 U.S. Intelligence Agencies | Recorded Future press release, Oct 25 2024 |
| Recorded Future client base | 1,900+ clients, 75 countries, 45 governments | Mastercard press release, Sep 12 2024 |
| Fortune 100 penetration (Recorded Future) | 50%+ | Mastercard press release, Sep 12 2024 |
International Government OSINT Programs
The pattern isn’t limited to the U.S. Intelligence Community. According to Mordor Intelligence’s 2026 report, the European Union’s security spending reached 9% of IT budgets in 2024 as organizations prepared for NIS 2 Directive compliance. Australia has debated establishing a standalone OSINT agency to reinforce its regional security posture. Germany’s Supply Chain Act now requires large employers to document third-party screening — a legal mandate that is, functionally, a statutory OSINT requirement for companies with over 1,000 employees.
The EU AI Act adds a layer: automated OSINT systems processing personal data now face mandatory conformity assessments, creating procurement urgency among European government agencies seeking compliant platforms before enforcement deadlines. GDPR Article 25 data-minimization requirements are compressing the margins of European OSINT platform vendors relative to their North American competitors, who operate under fewer architectural constraints.
OSINT Market Statistics by End User
Government and defense anchor the market but they are not driving the fastest growth. Financial services is the fastest-growing end-user vertical in the OSINT market, advancing at a 15.70% CAGR through 2031 according to Mordor Intelligence, driven by anti-money-laundering automation, sanctions screening, and real-time dark-web monitoring for fraud.
The acquisition of Recorded Future by Mastercard on September 12, 2024 — at $2.65 billion, confirmed in Mastercard’s SEC-filed Form 10-Q — is the clearest expression of that trend. Mastercard was already using Recorded Future to alert banks when cards were likely compromised before the acquisition. After closing in Q1 2025, the combined entity represents a financial services company that is also a commercial intelligence provider. That’s a genuinely new thing.
The DHS’s 2025 report on adversarial AI threats notes that 34% of dark-web forum listings target banking credentials specifically — the highest concentration of any single industry. Banks are responding to a threat that OSINT is the primary tool for detecting.
Corporate OSINT adoption outside financial services is harder to pin down with precise statistics because most corporate threat intelligence spending is bundled into general security operations budgets. What is visible in the data: 91% of organizations experienced an identity-related incident in 2024, according to SpyCloud’s 2025 report. Companies that previously treated dark-web monitoring as a nice-to-have are rebuilding it as an operational necessity, driven by the scale of credential exposure documented below.
OSINT Technology Statistics: Cloud, AI, and Deployment
Cloud vs. On-Premises
Cloud deployment dominates the OSINT market with a 67% share in 2025, growing at a 27.3% CAGR through 2035, according to Global Market Insights. The logic is straightforward: distributed intelligence teams, subscription-based pricing, and elastic scalability favor cloud architectures. Government and defense agencies running classified operations still prefer secure on-premises or private-cloud deployments, but even that segment is shifting.
AI-Powered OSINT Statistics 2026
The AI security segment within OSINT held a 23% market share in 2025 and is projected to grow at a 29.4% CAGR through 2035 — the fastest-growing sub-segment in the market — according to Global Market Insights. The function it serves: automating the intelligence cycle’s most time-intensive steps (collection, filtering, and pattern recognition across volumes of public data that no human team can process at speed).
One specific 2026 development worth naming precisely: SpyCloud’s 2026 report identified 6.2 million credentials and authentication cookies tied to AI tools circulating in the criminal underground in 2025. This didn’t exist as a measurable category two years ago. OSINT practitioners now have a specific new target: detecting AI platform credential exposure before attackers use it to move laterally across cloud infrastructure.
IBM’s 2025 Cost of a Data Breach Report found that 1 in 6 breaches involved attackers using AI — 37% for phishing and 35% for deepfake impersonation. It also found that organizations using AI and automation extensively in security operations saved an average of $1.9 million in breach costs and reduced breach lifecycles by an average of 80 days. Both findings point the same direction: AI in OSINT is both the threat surface and the primary mitigation tool.
What OSINT Is Defending Against: Identity Exposure Statistics 2026
The reason the OSINT market is growing isn’t abstract — it’s the scale of the data problem OSINT is trying to solve. These are not projected figures; they come from SpyCloud’s recaptured-data datalake, which is the largest commercial collection of criminal underground data published in a verifiable annual report.
Dark Web Credential and Identity Exposure
SpyCloud’s 2026 Identity Exposure Report, published March 2026:
- 65.7 billion distinct identity records now in SpyCloud’s datalake — a 23% year-on-year increase from the 53.3 billion recorded in 2025
- 5.3 billion credential pairs (username/password combinations) recaptured in 2025
- 18.1 million exposed API keys and tokens in 2025, spanning payment platforms, cloud providers, developer ecosystems, and AI services — the first year this category has been measured at this scale
- 6.2 million credentials and authentication cookies tied to AI tools — a category that didn’t exist in the 2025 report
- 80% of exposed corporate credentials contained plaintext passwords, making account takeover attacks trivially executable without any cracking
- Phishing attacks surged 400% year-on-year, with nearly half (49%) of 28.6 million phished identity records tied to corporate victims
SpyCloud’s 2025 report added one statistic that any government reading this should not ignore: 127,000 .gov credentials were recaptured from criminal sources in 2024, with a 67% all-time password reuse rate in the public sector — 13 percentage points higher than the previous year.
| Metric | Figure | Source | Year |
|---|---|---|---|
| Total identity records in SpyCloud datalake | 65.7B | SpyCloud 2026 Identity Exposure Report | 2026 |
| Year-on-year identity record growth | +23% | SpyCloud 2026 | 2026 |
| Credential pairs recaptured | 5.3B | SpyCloud 2026 | 2025 data |
| Exposed API keys and tokens | 18.1M | SpyCloud 2026 | 2025 data |
| AI tool credentials in criminal underground | 6.2M | SpyCloud 2026 | 2025 data |
| Corporate credentials with plaintext passwords | 80% | SpyCloud 2026 | 2025 data |
| Phished identity records | 28.6M | SpyCloud 2026 | 2025 data |
| Phishing surge YoY | +400% | SpyCloud 2026 | 2025 data |
| Identity records (prior year comparison) | 53.3B | SpyCloud 2025 Identity Exposure Report | 2025 |
| .gov credentials recaptured | 127K | SpyCloud 2025 | 2024 data |
| Public sector password reuse rate | 67% | SpyCloud 2025 | 2024 data |
Infostealer Malware and Session Hijacking Statistics
The credential theft picture gets more specific when broken out by vector. In 2025, SpyCloud recaptured 642.4 million credentials from 13.2 million infostealer malware infections — an average of 50 exposed credentials per infection. A notable share of those infections happened on endpoints that already had endpoint detection and response tools running. The tools didn’t catch the stealer; the stealer ran anyway. That’s the gap OSINT-based dark-web monitoring is designed to cover: catching the data after exfiltration rather than the malware before it executes.
Session hijacking has emerged as the more operationally dangerous successor to credential theft. An attacker with a stolen session cookie doesn’t need the password. They don’t need to beat MFA. They present a valid session token and the system waves them through. SpyCloud’s 2026 report documents 6.2 million AI-tool authentication cookies in criminal sources — in environments where the AI platform sits inside critical business workflows, that access path is worth more than most individual credentials.
The Cost of Intelligence Failure: OSINT and the Data Breach Economy
IBM’s 2025 Cost of a Data Breach Report, conducted independently by the Ponemon Institute across 600 organizations from March 2024 through February 2025, provides the most reliable benchmark for what it costs when OSINT-based detection doesn’t catch an exposure in time.
The 2025 figures:
- Global average data breach cost: $4.44 million — a 9% decrease from 2024’s $4.88 million, the first decline in five years. Faster AI-powered detection drove the reduction.
- U.S. average data breach cost: $10.22 million — a 9% increase from 2024, the first time U.S. costs have crossed $10 million. Higher regulatory fines and litigation costs are driving U.S. costs up even as global figures fall.
- Breach lifecycle: 241 days — the time to identify and contain a breach, now the lowest in nine years.
- Shadow AI premium: $670,000 — the additional average breach cost when attackers exploited unauthorized AI tools, per IBM.
- Healthcare: $7.42 million per breach — the 14th consecutive year healthcare leads all industries.
- 97% of organizations reporting AI-related breaches lacked proper AI access controls, according to IBM.
The 241-day breach lifecycle is worth sitting with for a moment. That’s eight months during which an attacker has access to an environment before being detected and contained. OSINT and dark-web monitoring are among the few mechanisms that can produce an earlier signal — because the data often appears in criminal marketplaces before the victim organization discovers the intrusion internally. IBM found that organizations detecting a breach internally (rather than being notified by law enforcement or an attacker) contained it significantly faster. That’s what active OSINT programs look like in financial terms: the difference between 241 days and less.
OSINT Vendor Market and M&A Statistics
The vendor landscape has consolidated significantly at the top, while the mid-tier continues to fragment. According to Global Market Insights, the top five players in the OSINT market — Google, Digimind (Onclusive), Palantir Technologies, Recorded Future, and Thales — held a combined 54% market share in 2025, with Google alone accounting for over 28%.
Two transactions define the 2024–2025 period:
Mastercard’s acquisition of Recorded Future for $2.65 billion (announced September 12, 2024; closed Q1 2025) — confirmed in Mastercard’s SEC-filed Form 10-Q. At the time of acquisition, Recorded Future served 1,900+ clients in 75 countries, including the governments of 45 countries and more than 50% of the Fortune 100, according to Mastercard’s acquisition press release. The price represents a strategic bet that intelligence infrastructure is worth more inside a global payment network than as an independent vendor — and that the line between financial services and intelligence is dissolving.
ODNI’s Sentinel Horizon program — announced October 25, 2024 — gave all 19 U.S. Intelligence Agencies operational access to commercial threat intelligence, institutionalizing commercial OSINT as part of the national intelligence architecture rather than treating it as a supplement to classified collection.
The market’s total commercial vendor count reached 93 named platforms across 12 functional categories as of June 2026, according to the OSINT Stack 2026 analysis published by Massive, which cross-referenced vendor documentation and deployment disclosures.
Frequently Asked Questions
What is the OSINT market size in 2026?
Published estimates for 2026 range from $8.7 billion to $22.95 billion across six research firms, according to Axis Intelligence Research’s cross-referenced analysis. The midpoint of those six estimates is $15.82 billion. The $14.25 billion gap between the extremes reflects genuine methodological disagreement about what counts as OSINT, not measurement error. The Axis OSINT Market Divergence Index (MDI) quantifies this as a 2.64× spread — a figure that should accompany any single market-size citation.
How much do governments spend on OSINT?
Axis Intelligence Research calculates implied government and defense OSINT spend at approximately $6.99 billion in 2025, derived by applying Mordor Intelligence’s disclosed government/defense sector share (38.40%) to Mordor’s own 2025 market figure ($18.20B). This is a derived figure, not one stated in any primary source — the methodology and inputs are disclosed in the Methodology section below.
What is the difference between OSINT and threat intelligence?
The line is contested and commercially contested — which is the primary reason market estimates diverge by $14 billion. Open-source intelligence refers to collection and analysis of publicly available information. Threat intelligence typically adds closed or proprietary collection (dark-web monitoring with purchased access, proprietary sensor networks, human analyst tradecraft) on top of OSINT inputs. Most commercial “OSINT platforms” in practice blend both. Research firms that draw a hard line between them produce smaller OSINT market estimates; those that treat threat intelligence as a subset of OSINT produce larger ones.
Which companies dominate the OSINT market?
The top five players by market share in 2025 were Google, Digimind (Onclusive), Palantir Technologies, Recorded Future (now owned by Mastercard), and Thales, according to Global Market Insights — holding a combined 54% share. Google’s 28%+ share reflects the role of its search, Maps, and cloud data infrastructure as the foundation layer for OSINT collection globally.
How is AI changing OSINT in 2026?
AI security is the fastest-growing sub-segment within the OSINT market, projected at a 29.4% CAGR through 2035, per Global Market Insights. Operationally, AI enables OSINT platforms to process data volumes no human team can cover manually. The more specific 2026 development: attackers are now using AI for 1 in 6 data breaches (phishing and deepfake impersonation), per IBM’s 2025 report — making AI-powered OSINT’s early-detection role against AI-enabled attacks the central operational tension of the field right now.
How many credentials are exposed on the dark web in 2026?
SpyCloud’s datalake, which represents the most comprehensive published collection of recaptured criminal underground data, totaled 65.7 billion distinct identity records as of the 2026 report. In 2025, SpyCloud recaptured 5.3 billion credential pairs and 18.1 million exposed API keys and tokens — including 6.2 million credentials tied to AI tools. These figures grow every year.
Is OSINT legal?
OSINT collects publicly available information — by definition, it operates in data that is not protected by unauthorized-access statutes. What varies by jurisdiction is what can lawfully be done with that data after collection: GDPR and CCPA impose processing, minimization, and retention constraints; the EU AI Act now imposes conformity-assessment obligations on automated OSINT systems that process personal data. Legality depends on collection method, jurisdiction, and use case. The tools are legal; the configurations are not always.
What drove Mastercard to acquire Recorded Future for $2.65 billion?
Mastercard had an existing commercial relationship with Recorded Future — the two companies collaborated on an AI service that alerts banks when cards are likely compromised before the fraud occurs. After that service launched, detection rates increased materially, according to the joint press release. The acquisition was a bet that intelligence infrastructure belongs inside a global payment network rather than as an external vendor relationship — and that payment networks able to combine transaction data with threat intelligence can offer a qualitatively different security product than either capability alone.
What is the Axis OSINT Market Divergence Index?
The Axis MDI is an original Axis Intelligence Research metric that quantifies the spread between the lowest and highest published market-size estimates for the OSINT market in a given year. For 2026, the MDI ratio is 2.64× ($8.7B to $22.95B across six estimates). It is designed to make the methodological disagreement between research firms visible rather than allowing any single estimate to be cited without context. Full methodology is in the section below.
What does OSINT spend look like in financial services?
Financial services is the fastest-growing OSINT end-user vertical, advancing at a 15.70% CAGR through 2031, per Mordor Intelligence. The DHS’s 2025 adversarial AI threats report notes that 34% of dark-web forum listings target banking credentials specifically — the highest concentration of any sector. Mastercard’s acquisition of Recorded Future and the subsequent ODNI Sentinel Horizon contract (also awarded to Recorded Future before the acquisition closed) illustrate how financial institutions and government agencies are drawing on the same commercial intelligence infrastructure.
Methodology
Axis Intelligence Research compiled this analysis between June 24 and June 30, 2026, drawing on six published OSINT market-size estimates (all 2026 vintage), SpyCloud’s 2025 and 2026 Identity Exposure Reports, IBM’s 2025 Cost of a Data Breach Report (Ponemon Institute methodology), official press releases and SEC filings for the Mastercard/Recorded Future transaction, and the Recorded Future/ODNI Sentinel Horizon program announcement.
Axis OSINT Market Divergence Index (MDI): Cross-references six published 2026 market-size estimates from named research firms. The MDI ratio is the highest estimate divided by the lowest. The midpoint is the simple arithmetic mean of the six values. Axis does not endorse any individual estimate as the “correct” figure — the purpose of the MDI is to make the disagreement quantitatively visible rather than leaving it to readers to discover by comparing disparate sources. This metric does not exist in any other published source. License: CC BY 4.0.
Axis Derived Government OSINT Spend: Computed by multiplying Mordor Intelligence’s government/defense sector share (38.40% of 2025 OSINT revenue) by Mordor’s own 2025 market total ($18.20B). The underlying inputs (sector share, total market) are Mordor Intelligence’s; the derivation and its presentation as a standalone dollar figure are Axis Intelligence Research’s. This figure has not been published by any other source in this form.
Market-size estimates (Mordor, GMI, Research Nester, Market Research Future, The Business Research Company, MarkWide Research): These are named in text and in the MDI table. None are hyperlinked — they are secondary market research organizations, not primary sources under Axis’s external-linking policy.
Primary sources hyperlinked in-text: ibm.com (IBM Cost of Data Breach Report 2025), spycloud.com (2025 and 2026 Identity Exposure Reports, both official SpyCloud newsroom releases), mastercard.com (acquisition press release), sec.gov (Mastercard Form 10-Q confirming transaction), recordedfuture.com (Sentinel Horizon program press release).
Limitations: Market-size estimates are proprietary research firm projections, not audited revenue data. Government OSINT spend is a derived figure based on a sector-share disclosure, not a budget document. SpyCloud figures represent data recaptured by one company from one datalake — total dark-web credential circulation is larger. IBM breach cost figures cover organizations that reported breaches to Ponemon’s research team and may not represent all breached organizations globally.
About This Dataset
Update cadence: Relevance-driven. This article will be revised when IBM’s 2026 Cost of a Data Breach report publishes, when SpyCloud’s next annual identity report drops (historically March), or when a major M&A transaction, government contract award, or ranking/traffic signal warrants a refresh. No fixed calendar cycle.
License: Creative Commons Attribution 4.0 International (CC BY 4.0)
Coverage: Global OSINT market, 2025–2026 primary data; forecasts extend to 2035 where original source firms supply them
Snapshot date: June 30, 2026
Use of the Axis MDI or the derived government OSINT spend figure in research, journalism, or publications is permitted under CC BY 4.0 with attribution to Axis Intelligence Research and a link to this page.
Citation Block
APA (7th edition) Axis Intelligence Research, & Chen, M. (2026, June 30). OSINT statistics 2026: Market size, identity exposure, and the gap nobody measures. Axis Intelligence. https://axis-intelligence.com/osint-statistics/
MLA (9th edition) Axis Intelligence Research and Marcus Chen. “OSINT Statistics 2026.” Axis Intelligence, 30 June 2026, axis-intelligence.com/osint-statistics/.
Chicago (17th edition) Axis Intelligence Research and Marcus Chen. “OSINT Statistics 2026.” Axis Intelligence, June 30, 2026. https://axis-intelligence.com/osint-statistics/.
Embed Block — Cite This Research
<div style="border:1px solid #e0e0e0;border-radius:8px;padding:20px;max-width:620px;font-family:sans-serif;">
<p style="font-size:13px;color:#555;margin:0 0 8px;">Axis Intelligence Research — OSINT Market Divergence Index (MDI) 2026</p>
<p style="font-size:32px;font-weight:700;margin:0;color:#1a1a1a;">2.64×</p>
<p style="font-size:14px;color:#333;margin:8px 0 4px;">OSINT Market Divergence Index — 2026</p>
<p style="font-size:13px;color:#666;margin:0 0 12px;">Six published 2026 OSINT market estimates range from $8.7B to $22.95B — a $14.25B spread. Axis Intelligence Research's cross-referenced midpoint: $15.82B. Government and defense OSINT spend implied at ~$6.99B in 2025.</p>
<a href="https://axis-intelligence.com/osint-statistics/"
style="font-size:13px;color:#2563eb;text-decoration:none;"
target="_blank" rel="dofollow">
Full OSINT Statistics 2026 → Axis Intelligence Research
</a>
</div>
<blockquote cite="https://axis-intelligence.com/osint-statistics/">
"Six published estimates put the global OSINT market between $8.7B and $22.95B in 2026 — a 2.64× divergence that no single market-size citation resolves. Axis Intelligence Research's cross-referenced midpoint is $15.82B, with implied government and defense OSINT spend of approximately $6.99B in 2025."
— <a href="https://axis-intelligence.com/osint-statistics/" rel="dofollow">Axis Intelligence Research, OSINT Statistics 2026</a>
</blockquote>
Others Pages