Maltego

Maltego is a desktop investigation platform. The piece most people mean is Maltego Graph. You drop in an entity (a person, a domain, an email, a crypto address) and you run Transforms that pull from 120+ data partners, then draw the links. The company also sells Search, Evidence, Monitor, and Cases as separate products around that graph.

This is the industry default for “put it on a graph.” Government teams and companies already have seats. The interface is a real application you install, not a website you paste an email into.

What you are buying

You are buying Transforms and the habit of thinking in entities. A Transform is a query packaged as a graph operation: expand this domain into IPs, expand this email into accounts, expand this account into a name. The value is the workspace, not any single data source. You can also point it at your own data.

You are not buying a cheap email lookup. Community-level access has existed in various forms over the years, but serious use is a paid seat plus whatever the data partners charge. Training is a product. So is professional services.

Why it is not a Gem on this site

Gems here are tools I would open first on a clock. Maltego is a platform I open when the case is already a graph problem. Many entities, several sources, a need to show the links to someone else. For a single email I would spend the first twenty minutes in Behind the Email, not waiting for a Transform set to finish.

If your team already lives in Maltego, stay there. If you do not have a seat, do not buy one to look up one address.