Definition · Recruiting and sourcing
X-Ray Search
Definition
X-ray search is a sourcing technique where a recruiter uses a general search engine, such as Google or Bing, with the site: operator and Boolean logic to search inside one website, for example public LinkedIn profiles or GitHub pages. It finds candidates a site's own search hides or limits, without needing a paid account on that site.
Also called: X-ray sourcing, Google X-ray search, LinkedIn X-ray search, Site search
How X-ray search works
Search engines index public pages from most large websites. The site: operator tells the engine to return results only from one domain. Combine it with Boolean search (quotes for exact phrases, OR for alternatives, a minus sign to exclude) and you can query that site's public pages more flexibly than its own search box allows.
A basic LinkedIn X-ray search for a Spanish-speaking customer service supervisor in Phoenix looks like this:
site:linkedin.com/in ("customer service supervisor" OR "call center supervisor" OR "team lead") "Phoenix" (Spanish OR bilingual) -jobs
The site:linkedin.com/in part limits results to individual profile pages, the brackets hold alternative titles, the location and language terms narrow it, and -jobs removes job postings. The same approach works on other sites: site:github.com for developers, site:stackoverflow.com/users for engineers, state nursing board or association directories for licensed staff, and conference speaker pages for niche specialists.
Why recruiters still use it
The obvious reason is cost. A free search engine reaches public profiles that would otherwise need a paid recruiter seat. But even teams with full licenses use X-ray search, for three reasons.
First, it searches places a single tool does not cover: personal websites, portfolios, PDF resumes posted publicly, alumni lists, open-source projects. Second, it handles complex logic differently, so it often surfaces profiles that a platform's own ranking pushes down. Third, it helps when the target is a skill rather than a title. Searching for a specific certification, software or license number pattern across the web finds people who list the skill but use an unusual job title.
X-ray search is one method within broader candidate sourcing. It is most useful for passive candidates and hard-to-find specialists, much less so for entry-level hourly roles, where job ads and referrals bring in more applicants for less effort.
Useful X-ray search strings
- LinkedIn profiles by title and city: site:linkedin.com/in "workforce manager" ("Dallas" OR "Fort Worth") -jobs -posts
- Resumes posted as files: (intitle:resume OR inurl:resume) "forklift" "OSHA" (Memphis OR "Olive Branch") filetype:pdf
- GitHub users by language and location: site:github.com "location" "Austin" (Python OR Django) -topics
- Profiles mentioning a certification: site:linkedin.com/in ("CCNA" OR "CompTIA Network+") "help desk" "Ohio"
- Alumni of a program: site:linkedin.com/in "[University Name]" "Accounting" "2024" (staff OR associate)
Tweak and test. Search engines change how they handle operators, and results vary between Google and Bing, so run important strings on both. Expect to rewrite a string three or four times before it returns mostly relevant results.
Limits and mistakes
X-ray search is less precise than it looks. Search engines index only part of any site, show only limited result pages, and return stale snippets, so a profile may show a job the person left a year ago. Treat results as leads to verify, not a complete list.
Common mistakes:
- Too many terms. Each extra required term cuts results sharply. Start broad, then narrow.
- Forgetting synonyms. People describe the same job five ways. Use OR groups for titles.
- Ignoring exclusions. Without -jobs and similar terms, half the results may be job postings.
- Scraping at scale. Copying large numbers of profiles with automated tools can break a site's terms of service and can conflict with privacy laws.
Privacy and outreach rules
A public profile is not a free pass to contact anyone any way you like. In the EU and UK, GDPR applies to candidate data you collect, even from public sources, so you need a lawful basis and must tell the person how you got their data, typically within a month. Several US states have privacy laws that cover personal information processed for recruiting, and the TCPA restricts automated calls and texts to mobile numbers without consent. Rules vary by country and state.
In practice: record where you found each person, contact them individually rather than in mass campaigns, give a clear way to opt out, and delete data you are not going to use.
Frequently asked questions
What is X-ray search in recruiting?
Using a search engine such as Google with the site: operator and Boolean terms to find candidate profiles on a specific website, like LinkedIn or GitHub, without relying on that site's own search.
How do I do a LinkedIn X-ray search?
In Google, type site:linkedin.com/in followed by the job title in quotes, alternative titles joined with OR, a location, and exclusions such as -jobs. Refine by adding skills or removing terms until the results are relevant.
Is Google X-ray search legal?
Searching public pages is generally legal. What you then do with the data is regulated: privacy laws such as GDPR, state privacy laws and the TCPA govern how you store data and contact people, and websites' terms may ban automated scraping.
What is the difference between X-ray search and Boolean search?
Boolean search is the logic: AND, OR, NOT, quotes and brackets. X-ray search applies that logic through a search engine to one website using the site: operator. Every X-ray search uses Boolean logic, but Boolean search can also be used inside an ATS or job board.
Does X-ray search still work on LinkedIn?
Yes, for public profile pages that search engines have indexed, though results are incomplete and can be out of date. It works best as a way to find names to verify and contact.