# Open source Clearbit Reveal alternative: looot-reveal The code is MIT open source. The data is not free and not self-hosted: every real run calls looot and pays per call at the catalog price shown before the run. See which companies visit your website, at company level. ## Short answer looot-reveal is an MIT-licensed web app and CLI that turns visitor IP addresses into the company that owns the network. It reads an access log, a CSV or a tracking snippet, drops ISP, hosting and VPN traffic, and flags matches against your ICP. It stops at the company. The data is paid per looot call. ## What it does It reads a combined-format access log, a CSV with an ip column, JSON lines or visits sent by a small snippet. Each new IP goes down an ordered list of providers and the walk stops at the first ISP, mobile, hosting or VPN verdict or at the first confident company match. The company that is left is enriched from its domain and shown in a feed with the pages it viewed. Every ICP flag lists its signals, the provider that supplied each one and the cost of that call. There is no hidden score. It is company level by default. It never tries to name a person behind a visit. An optional person-level slot exists for US visitors. It ships off, with no supplier, and needs a setup page with five ticked conditions. This is the job that products such as RB2B and Clearbit Reveal do. ## Commands git clone https://github.com/loootai/looot-reveal && cd looot-reveal npm ci npm run demo npm run reveal -- --input examples/access.log --dry-run export LOOOT_TOKEN=... npm run reveal -- --input access.log --cap 0.50 ## Facts - Job: See which companies visit your website, at company level. - License: MIT - Language: TypeScript - Needs: Node.js 20.9 or newer to run it, 22.12 or newer for its tests - Needs: A looot token with the scopes runs.execute, catalog.read, runs.read and usage.read, for real lookups only - Needs: A funded looot balance, for real lookups only - Needs: An admin password of 12 characters or more for the web app outside the demo - Demo mode: Yes. npm run demo shows made-up companies on documentation addresses. It needs no token, makes no looot call and keeps its data in memory. It refuses to start if a token or a data file is present. - Repository: https://github.com/loootai/looot-reveal ## Endpoints it calls - ipinfo: ipinfo-lite (ip_lookup), Network owner name, domain and ASN - ipinfo: ipinfo--2 (ip_lookup), Owner, location, network type and VPN flags - people-data-labs: people-data-labs-ip-enrich (ip_enrich), Company behind an IP, charged on a match (off by default) ## What it does not do - An IP lookup returns the organisation that owns the network. It does not identify the visitor, and consumer ISP, mobile, hosting and VPN addresses are dropped from the feed. - Company level only by default. The optional US-only person-level slot ships off with no identity supplier. looot supplies no person-level visitor identity. - An IP address is personal data in the EU and the UK. You need a consent banner before the snippet sends anything, and this page is not legal advice. - When a provider returns only the network name, the app falls back to a hint list to spot ISPs. That list is a heuristic. - Response parsing was written from public field lists and fixtures. The README says it was not checked against a recorded paid response. - The snippet and collect route were not load tested, and the rate limit is in memory per process. The web app has one admin password and no per-user accounts. ## Run it with an agent Use looot to find which companies visited my website from an access log. Read https://looot.ai/skill.md first. Then clone https://github.com/loootai/looot-reveal, run its dry run on my log file and show me the quote and the cap. Run the lookup only after I say yes, and list the visiting companies that match my ICP with the pages they viewed. ## What does looot-reveal do? It turns visitor IP addresses from an access log, a CSV or a tracking snippet into the companies that own those networks. It drops ISP, hosting and VPN traffic and flags the rest against an ICP you set. ## Does it identify the person who visited? No. It stops at the company by default. An optional US-only person-level slot exists, but it ships off and with no identity supplier, and looot supplies no person-level visitor identity. ## Is looot-reveal free? The code is free under the MIT license. The data is not. Every real lookup is a paid looot call at the catalog price, quoted before the run. Demo mode and the dry run cost nothing. ## What does a lookup cost? The table on this page shows the live catalog price of each endpoint. The first provider in the walk is free. The CLI quote prices the worst case for your file, and an address seen again costs nothing. ## Is it legal to look up visitor IPs? An IP address is personal data in the EU and the UK, so you need a consent banner before the snippet sends anything. The repo ships privacy controls and a sample notice. This is not legal advice, so ask a lawyer. ## Can I try it without a looot account? Yes. npm run demo and the dry run need no token. A real lookup needs a token with four scopes and a funded balance. ## Do I have to host it myself? Yes. It runs on your machine or your server and keeps its data in plain files on disk. Outside the demo the admin pages need a password you set, and the README advises putting them behind a VPN or an identity-aware proxy. ## How do I run it from an agent? Give your agent the prompt on this page and the setup link https://looot.ai/skill.md. The repo ships a skill that always dry-runs first and never raises the cap on its own. ## Related - /open-source-alternatives - /can-i-replace/clearbit - /mcp/people-data-labs - /free-tools ## Last read 2026-10-11. Facts come from the repository on GitHub. The price per call is read live from the catalog on the web page.