X-Ray Search as a Low-Cost Sourcing Multiplier in 2026: The Complete Playbook

Most companies are paying $1,080 per seat per month for LinkedIn Recruiter when they could source a significant portion of the same candidates for free.

X-ray search — using Google's advanced operators to surface LinkedIn profiles, GitHub contributions, Stack Overflow answers, and Behance portfolios — is one of the most underused tactics in recruiting. It costs nothing beyond your time. It accesses candidates who are invisible to LinkedIn Recruiter's Boolean search. And it works for almost every role type, from engineers to designers to executives.

This is the complete playbook. Not a surface-level overview. Every operator, every platform, every advanced tactic, every mistake to avoid — and how to combine x-ray sourcing with EvexAI's Entity vetting model to turn free candidate discovery into quality hires in 1–2 days.

What X-Ray Search Actually Is

X-ray search is the practice of using search engines (primarily Google) to search inside specific websites for content that those sites do not always surface in their own native search.

The core mechanism: Google indexes the public content of websites like LinkedIn, GitHub, and Stack Overflow. By using Google's site: operator, you can search inside those sites with greater precision and flexibility than those sites' own search tools allow.

For recruiting, this means: you can find LinkedIn profiles, GitHub repositories, Stack Overflow answer histories, and Behance portfolios — without a LinkedIn Recruiter subscription, without a GitHub enterprise account, and without any paid tool.

The candidates you find this way are often the most valuable ones: passive candidates who have not updated their LinkedIn profiles, engineers who contribute to open source but do not actively job hunt, designers who showcase work on Behance but never apply to job boards.

Key point: X-ray search finds profiles. It does not vet them. That is where EvexAI's Entity model becomes the natural complement — x-ray to discover, EvexAI to vet.

The Core Google Operators You Need to Know

Before building searches, you need to understand the operators. These are the building blocks of every x-ray query.

The Essential Six

1. site: Restricts results to a specific domain or subdomain.

site:linkedin.com/in

Returns only LinkedIn individual profile pages.

site:github.com

Returns all GitHub pages (profiles, repos, gists).

2. "" (Quotation marks) Exact phrase match. The query will only return results containing that exact string.

"machine learning engineer"

Returns pages with that exact phrase, not pages with "machine" and "learning" and "engineer" scattered separately.

3. - (Minus/exclusion) Excludes pages containing the specified term.

site:linkedin.com/in "product manager" -recruiter

Returns product manager profiles but excludes pages with "recruiter" — removes recruiting consultants posing as PMs.

4. OR Finds pages containing either term (must be uppercase).

"head of product" OR "VP of product" OR "director of product"

Returns pages with any of those exact titles.

5. intitle: Restricts the search to the page title only.

intitle:"software engineer" site:linkedin.com/in

Returns LinkedIn profiles where "software engineer" appears in the page title (usually the headline).

6. inurl: Restricts the search to the URL.

inurl:github.com/users "machine-learning"

Returns GitHub user pages with "machine-learning" in the URL.

Platform-by-Platform X-Ray Playbook

LinkedIn X-Ray Search

LinkedIn Recruiter charges $170–$1,080/seat/month to search its database. Google's site: operator searches the same public profile data for free.

Basic LinkedIn x-ray template:

site:linkedin.com/in "[job title]" "[location]" "[skill or company]"

Real examples:

Senior software engineer in Austin with Python:

site:linkedin.com/in "senior software engineer" "Austin, Texas" "Python"

Product manager at a Series B startup in New York:

site:linkedin.com/in "product manager" "New York" "Series B" -recruiter

Head of growth with SaaS experience:

site:linkedin.com/in ("head of growth" OR "VP growth" OR "director of growth") "SaaS"

Marketing director who has worked at specific companies:

site:linkedin.com/in "marketing director" ("Stripe" OR "Notion" OR "Linear")

Advanced LinkedIn x-ray tactics:

Find candidates open to work (explicitly stated):

site:linkedin.com/in "open to work" "product designer" "San Francisco"

Find candidates with specific certifications:

site:linkedin.com/in "AWS Certified Solutions Architect" "cloud engineer"

Find candidates in specific LinkedIn groups (from their profile):

site:linkedin.com/in "member of" "Y Combinator" "founder" OR "co-founder"

Find executives at competitor companies:

site:linkedin.com/in "VP Engineering" ("Vercel" OR "Netlify" OR "Railway")

What LinkedIn x-ray finds that LinkedIn Recruiter misses:

LinkedIn Recruiter's Boolean search only surfaces profiles that contain your exact keywords AND have been recently enough updated that LinkedIn's algorithm surfaces them.

Google indexes all public profile content, including profiles that have not been updated in years. A passive candidate who joined LinkedIn in 2019 and has not logged in since 2022 is largely invisible to LinkedIn Recruiter's native search. Google's index catches them.

GitHub X-Ray Search

GitHub is the richest source of technical talent outside LinkedIn. It shows you what engineers actually build, not just what they claim to have built.

Why GitHub sourcing is powerful:

• Engineers with strong GitHub profiles are typically higher-quality than those who only have a LinkedIn presence
• Contribution history shows actual code quality, not resume claims
• Open-source contributions reveal technical depth, collaboration style, and communication quality (through code reviews and pull request comments)
• Many top engineers have minimal LinkedIn presence but rich GitHub profiles

Basic GitHub x-ray template:

site:github.com "[technology/skill]" "[location or company]"

Real examples:

Python engineers in London:

site:github.com "Python" "London" "machine learning"

Engineers who contributed to specific frameworks:

site:github.com "contributor" "React" "TypeScript" "open to work"

Engineers with strong open-source projects:

site:github.com/[username] "stars" "followers" "Python"

ML engineers with published research:

site:github.com "machine learning" "published" "arxiv" "Python"

Reading GitHub profiles for recruiting signals:

When you find a candidate via GitHub x-ray, look for:

Advanced GitHub x-ray:

Find engineers who are active contributors to frameworks you use:

site:github.com "contributor to" "Next.js" OR "Svelte" OR "Remix" "engineer"

Find engineers who have released npm packages:

site:github.com "npm" "published" "TypeScript" "open source"

Stack Overflow X-Ray Search

Stack Overflow reveals something neither LinkedIn nor GitHub does: how engineers communicate when explaining complex problems to others.

A candidate's Stack Overflow answer history is one of the best proxies for:

• Depth of knowledge (complexity of questions they answer)
• Communication clarity (quality of their explanations)
• Collaborative spirit (do they help others without direct reward?)
• Consistency (how long have they been contributing?)

Basic Stack Overflow x-ray template:

site:stackoverflow.com/users "[technology]" "[location]"

Real examples:

Python engineers who are active Stack Overflow contributors:

site:stackoverflow.com/users "Python" "machine learning" "London"

Senior engineers with high reputation scores:

site:stackoverflow.com/users "reputation" "senior" "Kubernetes"

Data scientists who answer ML questions:

site:stackoverflow.com/users "data science" "Python" "TensorFlow"

Reading Stack Overflow profiles:

Behance X-Ray Search (Designers)

For design roles, Behance is the equivalent of GitHub for engineers. It shows actual design work, not LinkedIn profile claims.

Basic Behance x-ray template:

site:behance.net "[design specialty]" "[tool or style]"

Real examples:

Product designers with SaaS experience:

site:behance.net "product design" "SaaS" "Figma"

UX designers specializing in mobile:

site:behance.net "UX design" "mobile" "iOS" "case study"

Brand designers for startups:

site:behance.net "brand identity" "startup" "logo" "available"

What Behance shows you:

• Portfolio quality (actual work samples, not resume claims)
• Aesthetic range (can they adapt style to different contexts?)
• Process documentation (do they show their thinking, not just the final output?)
• Project variety (have they solved different kinds of problems?)
• Client or company names (what caliber of work have they done?)

Wellfound (AngelList) X-Ray Search

Wellfound (formerly AngelList) is the best source for startup talent. Candidates on Wellfound are explicitly interested in startup environments — a signal LinkedIn cannot surface.

Basic Wellfound x-ray template:

site:wellfound.com/u "[role]" "[skill]" "open to" OR "looking for"

Real examples:

Engineers open to startup roles:

site:wellfound.com/u "software engineer" "Python" "open to opportunities"

Startup-experienced product managers:

site:wellfound.com/u "product manager" "Series A" OR "Series B" "SaaS"

Twitter/X X-Ray Search (Executive & Thought Leader Sourcing)

For senior, executive, and thought-leader roles, Twitter/X profiles reveal public voice, industry positioning, and network quality that LinkedIn profiles cannot.

Basic Twitter x-ray template:

site:twitter.com "[role or expertise]" "[location or industry]" -RT

Real examples:

CTOs and VPs Engineering who tweet about engineering culture:

site:twitter.com "CTO" "engineering culture" "hiring" "startup"

Growth leaders who share marketing strategy:

site:twitter.com "head of growth" "SaaS" "PLG" "funnel"

Advanced X-Ray Combinations

The most powerful x-ray searches combine multiple platforms and signals.

Cross-platform search (find the same candidate on LinkedIn AND GitHub):

Step 1: Find GitHub profile.

site:github.com "machine learning" "Python" "London" "available"

Step 2: Take the candidate's name. Search LinkedIn.

site:linkedin.com/in "[full name]" "machine learning"

Now you have both their technical proof (GitHub) and their professional background (LinkedIn).

Competitive talent mapping (find all senior engineers at a competitor):

site:linkedin.com/in "senior engineer" OR "staff engineer" "Vercel" -current

This surfaces engineers who previously worked at Vercel but are no longer there — potential passive candidates who are familiar with your competitive landscape.

Alumni network sourcing (find people from strong-signal companies):

Companies with high engineering standards (Stripe, Linear, Notion, Figma) produce alumni worth recruiting. Finding them via x-ray is faster and cheaper than LinkedIn Recruiter.

site:linkedin.com/in "engineer" ("Stripe" OR "Linear" OR "Figma" OR "Notion") "currently"

X-Ray Search + EvexAI: The Complete Low-Cost Hiring System

X-ray search solves the sourcing problem. It does not solve the quality problem.

You can find 200 LinkedIn profiles, 50 GitHub contributors, and 30 Behance portfolios for free. But you still need to figure out which ones will actually perform in your role, stay long-term, communicate well, and fit your team.

This is where EvexAI's Entity model becomes the essential second step.

The combined workflow:

Step 1: X-ray source (free, 2–4 hours)

• Use Google operators to find candidates on LinkedIn, GitHub, Stack Overflow, Behance
• Build a list of 20–50 candidates across platforms
• Note obvious signals (GitHub stars, Stack Overflow reputation, Behance portfolio quality)

Step 2: Submit to EvexAI for Entity vetting (same day)

• Sign up for EvexAI (3-day free trial, no credit card)
• Post role with performance criteria
• Submit sourced candidates for Entity vetting
• Entity runs video proof, behavioral analysis, collaboration signals, communication assessment

Step 3: Receive vetted shortlist (1–2 days)

• Entity delivers 5–15 vetted candidates with performance assessments
• Each candidate has documented proof of capability
• You know who will perform before making the offer

Step 4: Interview and hire (same day)

• Review shortlist (15 minutes)
• Interview 2–3 vetted candidates
• Make offer
• Total time: 1–2 days from sourcing to hire

Total cost of this workflow:

• X-ray sourcing: $0
• EvexAI subscription: $129.99/month (entry) or $400–500/month (mid-market)
• Total: $129.99–$500/month for complete sourcing + vetting + hiring

Compare that to:

• LinkedIn Recruiter Corporate: $1,080/seat/month
• Plus ATS, assessment tools, scheduling: +$3,500–8,000/month
• Traditional stack: $4,580–$9,080/month

The x-ray + EvexAI combination costs 90–97% less than a traditional LinkedIn Recruiter stack.

Common X-Ray Search Mistakes

Mistake 1: Too many keywords in one query

Bad:

site:linkedin.com/in "senior software engineer" "Python" "machine learning" "AWS" "Kubernetes" "Docker" "TypeScript" "React" "New York"

This query is too narrow. You will get 0–5 results. Use fewer, higher-signal terms.

Good:

site:linkedin.com/in "senior software engineer" "machine learning" "New York"

Mistake 2: Not excluding irrelevant results

If you are searching for product managers, your results will include recruiting consultants, PM coaches, and career service providers. Exclude them.

site:linkedin.com/in "product manager" "SaaS" -recruiter -coach -consultant

Mistake 3: Ignoring recency signals

Google's Tools filter lets you restrict results to pages updated within a specific time range. Use this to find candidates whose profiles have been recently updated (signaling active job search).

After running a search: click Tools → Any time → Past year (or Past month for active candidates).

Mistake 4: Not checking all platforms for the same candidate

LinkedIn shows background. GitHub shows code. Stack Overflow shows communication. Behance shows design. A candidate who appears on all four platforms is almost always higher-quality than one who only appears on LinkedIn.

Mistake 5: Using x-ray search as a replacement for vetting

X-ray search finds profiles. It does not tell you whether candidates will perform, stay, or fit your team. Always pair x-ray sourcing with EvexAI vetting before making a hire.

X-Ray Search by Role Type: Quick Reference

Frequently Asked Questions

Is x-ray search legal?

Yes. X-ray search uses Google to index publicly available profile information. You are accessing only what candidates have made public. This is no different from viewing a profile directly. GDPR requires that you handle any personal data collected responsibly (do not store it improperly or contact people in ways they did not consent to).

Does x-ray search violate LinkedIn's terms of service?

X-ray search does not access LinkedIn behind any login or scrape data programmatically. You are simply using Google to find publicly