Use Tomba in Maltego to see how people, emails and companies connect, on one visual map. Maltego is a tool that security researchers and investigators use to explore links between data.

Tomba adds 22 lookups to Maltego. Maltego calls them transforms. Tomba builds and maintains them.

Before you start

⚠️ Important: This is a technical setup. It uses a terminal, the text window for typing commands. It also needs Python 3.10 or later, a programming language, on your computer. If that's new to you, ask a technical colleague to help.

You also need Maltego, plus your Tomba API key and secret. These are private codes that let Maltego use your Tomba account. See How to find my API key?.

Set it up

Step 1. Open Integrations and find the Others group. Select Connect on the Maltego card to open the setup guide.

The Others group on the Integrations page, with the Steampipe and Maltego names outlined beside two cards marked Coming soon

Step 2. Copy your key and secret from API Keys.

The API Keys page with an arrow on the API Key & Secret column, where each blurred value has a show and a copy button

Step 3. Follow the setup guide to install the lookups on your computer and add your key and secret.

Step 4. In Maltego, use Import Config to import the file the guide creates. The lookups appear under the Local server, with names that start with Tomba.

What you can do

Find the emails at a company: start from a website with Tomba - Domain Search.
Find a person's email: start from a name and company website with Tomba - Email Finder.
Check an email: use Tomba - Email Verifier.
Learn more about a person or company: use Tomba - Person Enrichment or Tomba - Company Enrichment.
Find a phone number: use Tomba - Phone Finder.
Search for companies in plain words: type a phrase such as "software companies in France", and use Tomba - Companies Search.

Example: map the people at a company

Add a Website entity to your map, with the value tomba.io. An entity is an item on the map.
Run Tomba - Domain Search. Maltego adds the emails, people and company it finds.
Select the emails and run Tomba - Email Verifier to check them.

💳 Credits: Each lookup is charged as if you ran the same search in Tomba. For example, Tomba - Domain Search uses 1 search credit for every 10 emails, and Tomba - Email Verifier uses 1 verification credit.

Common questions

Why do I have to install the lookups?

Tomba's lookups run on your own computer, so you install them with the setup guide.

Why do I see an error about my credentials?

Your key or secret is missing or wrong. Check both on API Keys, then add them again as the setup guide shows.

For developers: see the Tomba docs.

Maltego integration