Collecting and analyzing public information on the target, aka Open Source Intelligence (OSINT), is a mandatory stage of a modern pentest. The value of such analysis is difficult to overestimate, however, only few people treat it with due attention. Some even skip this stage and start vulnerability scanning right away. It is a mistake, because collecting information on systems and personnel in the area of testing usually plays a crucial role in security audit and is essential for success of an audit conducted with the use of social engineering techniques. Lead Consultant at BMS Consulting, head of information security testing section, former IT auditor, security specialist in the real sector and IT security implementor. Focuses on psychological aspects of Information security and human element of security systems. Cofounder of the Ukrainian Information Security Group (UISG). Blogger, podcaster, speaker and organizer of professional conferences. Holder of CISSP, CISA and other qualifications. Kiev, UkraineVladimir Styran Vladimir Styran