This is the first blog post in a two-part series on how investigators can and should be using Reddit in their online work.

Started in 2005 as a source for quickly locating news, Reddit proclaims to be “the front page of the Internet.” With one billion users per month, it might just be. For investigators, social media searches often involve using Facebook, Twitter, LinkedIn, and Instagram. It’s time to add Reddit to the list.

Whether you’re tracking items on the dark web or trying to get a story from remote locations, Reddit can be a powerful resource in your OSINT toolkit. Investigators are increasingly using the social media platform to locate savvier social media users, Dark Web matter, and items needing instant recognition.

It’s also beneficial to security practitioners trying to get a story from remote locations. Take the 2016 Turkish coup, for example. Major media outlets were suppressed, but social media users were posting on their boards in real time what was happening in their neighborhoods. The content was quickly aggregated on Reddit boards, and someone working in an operations center a country away could get an inside perspective of what was happening on the ground, circumventing the need for delayed media reports. In a future blog post, our analyst Matt Golabek discusses how Reddit can be used for predictive analysis, as he and other Hg colleagues did to ensure safe delivery of the COVID-19 vaccines to millions of Americans and foreign nations.

How does it work?

Reddit allows users to post content they deem relevant. Reddit then aggregates these users and content by topics. These topics become global conversations, with content ranked by users via crowd sourcing. In a world of fake news, Reddit users are quick to flesh out random, miscellaneous stories from real content. It’s a media popularity contest of sorts, quickly establishing key pieces of information for its readership.

With the tagline, “Come for the cats, stay for the empathy,” it might be hard to take Reddit content seriously at first blush. But it is. Reddit has become a vital portal for capturing under-reported news and boots-on-the-ground perspectives—invaluable information for investigators. While searching for information, however, don’t be surprised to stumble upon the obligatory cat video.

The Basics

Reddit Communities

Subreddit is the moniker for a focused community on Reddit. Anyone can create and monitor a subreddit. Each subreddit is hosted by a moderator and comes with its own rules regarding posts. Names of subreddits begin with a lowercase r followed by a slash and the name of the subreddit topic.


r/surveillancetricks is a focused community on surveillance tricks

r/osinttools is a focused community on OSINT tools.


As you cruise through the various Reddit and subreddit boards, you can vote on stories with upvotes or downvotes. Think: Facebook Likes or Twitter Hearts. Unlike Facebook and Twitter, however, a Reddit upvote or downvote has a direct impact on the story’s ranking. Upvotes by the community will draw a story to the top of the feed, and downvotes will push a story to the bottom.


Opinions are rampant on Reddit; everyone seems to have one, when it comes to commenting on available story lines. Discussion on any post is considered valuable content to the readership. It offers additional information, debate, and opinion—the latter of which may be polarizing or simply flat out funny.

Snoo (a/k/a Reddit Alien)

Reddit’s onsite mascot and registered trademark, Snoo, is a small creature with red eyes and a single bent antenna protruding from its head. Its name is a play on ’Snew, as in “What’s New?”—the intended, but already-taken, original name of Reddit. The Snoo image changes with each new subreddit topic. If you see Snoo in online content you are reviewing, you know the content came from Reddit.

Are you an analyst or investigator looking for advanced OSINT training on predictive intelligence and risk monitoring? If so, check out Hg’s webinar series on social media investigative training, where you can attend live sessions and receive CEUs or watch previously recorded sessions to beef up your investigative skills.


Are you concerned about your company’s or employees’ social media imprint? Has you or your company been the target of a protest? Using proprietary software and popular current awareness vendor tools, Hetherington Group monitors over 20 million sources, sites, and Dark Web markets. As an extension of your own security and intellectual property team, our seasoned professional analysts conduct continuous monitoring for executives and company and brand names. Learn how our team can assist you in assessing and monitoring your risks.