LinkedIn X-Ray Search: How to Find Profiles With Google (12 Copy-Paste Strings)

X-ray search uses Google's site: operator to find LinkedIn profiles without logging in or burning Sales Nav credits. The anatomy, plus 12 ready strings.

Generate summary Hide summary
Summary
  • X-ray search is a Google search restricted to linkedin.com/in, so results are only LinkedIn profiles
  • It costs nothing, needs no login, and ignores LinkedIn's search limits, because it never touches LinkedIn's search
  • Five operators do all the work: site:, quotes, OR, minus, and intitle:
  • It beats LinkedIn's own search for free keyword digging; it loses badly on filters and freshness
  • Viewing public pages via Google is fine. Collecting them at volume with a bot is scraping, and that's where the risk is
On this page

X-ray search is the old recruiter trick of searching LinkedIn from the outside: you ask Google for pages that live under linkedin.com/in, which means every result is a public LinkedIn profile. No login, no Sales Navigator seat, no “you’ve reached the monthly limit” banner, because you never touched LinkedIn’s search at all.

It’s called X-ray because you’re seeing through the site’s own interface into its pages. The technique is twenty-plus years old, it still works, and for certain jobs it beats the search box LinkedIn gives you. For others it loses badly. This guide covers the operator anatomy, twelve strings you can paste straight into Google, and an honest account of both halves.

How it works, in one query

Paste this into Google:

site:linkedin.com/in ("head of marketing" OR "vp marketing") "bengaluru" -recruiter

Every part is doing a job:

  • site:linkedin.com/in restricts results to one site, and more specifically to profile URLs, which all live under /in/. This is the whole trick. Without it you’d get LinkedIn posts, company pages and job ads mixed in.
  • "head of marketing" — quotes mean this exact phrase. Without quotes Google will happily match the three words scattered across a page.
  • OR — either phrase matches. It must be uppercase, and grouping the alternatives in parentheses keeps the logic unambiguous.
  • "bengaluru" — another exact phrase. City names work because most people list their location and it appears on the public page.
  • -recruiter — the minus sign excludes. Useful for filtering out the people who hire the role from the people who hold it.

One more operator earns its place: intitle:. A LinkedIn profile page’s title is roughly “Name - Headline | LinkedIn”, so intitle:founder matches people with founder in their headline, not just somewhere on the page. It’s the closest X-ray gets to a title filter, and it cuts noise dramatically.

12 copy-paste search strings

Swap the quoted phrases for your own titles, skills and cities. Everything else can stay.

1. Founders in Bengaluru

site:linkedin.com/in ("founder" OR "co-founder") "bengaluru"

2. CFOs in fintech

site:linkedin.com/in "cfo" (fintech OR "financial services") ("mumbai" OR "bengaluru")

3. Marketing leaders at SaaS companies

site:linkedin.com/in ("head of marketing" OR "vp marketing") saas india

4. Freshers with a specific skill

site:linkedin.com/in "fresher" "python" ("pune" OR "hyderabad")

5. A specific role at a specific company

site:linkedin.com/in "tata consultancy services" "data engineer"

6. Alumni of one college in one function

site:linkedin.com/in "iit kharagpur" "product manager"

7. Any search, India-only profiles

site:in.linkedin.com/in "sales director" "logistics"

8. Founders by headline, not by page text

site:linkedin.com/in intitle:founder "chennai"

9. Sales leaders, minus the recruiters and freelancers

site:linkedin.com/in "sales director" "delhi" -recruiter -freelance

10. Agency owners in a service niche

site:linkedin.com/in ("agency owner" OR "agency founder") ("performance marketing" OR "seo")

11. Local professionals for a B2B service

site:linkedin.com/in ("dentist" OR "dental clinic") "hyderabad"

12. HR and TA people hiring for a stack

site:linkedin.com/in ("talent acquisition" OR "hr manager") "hiring" "react"

A practical note on volume: Google will show you a few hundred results per query at most, however many actually exist. When a search is too broad, don’t page through it, slice it: run it once per city, or once per title variant, and you’ll surface far more profiles than one giant query ever returns.

It’s free, and it doesn’t count. LinkedIn’s free search throttles you with the commercial-use limit if you search like a professional. Google has no such meter, and no seat cost, which matters when a Sales Navigator seat runs into real money.

No login, no footprint. You can qualify people from the Google snippet before ever opening their profile. Logged-out reading via Google leaves no profile-view trail while you’re still deciding whether someone’s relevant.

It searches page text properly. Quoted phrases, real boolean grouping, exclusions, title-only matching. LinkedIn’s free search box is weaker on every one of those, and it keeps changing what it honours.

It reaches past the interface. LinkedIn decides what its search shows you and in what order. Google is indifferent, if the phrase is on the public page, you can find it.

Where it fails

The index is stale. Google’s copy of a profile can lag the real one by weeks or months. People change jobs; X-ray doesn’t know. Treat every result as a lead to verify on the live profile, never as current data.

There are no real filters. No company headcount, no seniority level, no industry taxonomy, no years-in-role, no geography radius. You’re pattern matching on text. Sales Navigator’s structured filters are precisely the thing X-ray cannot fake, and if you source people every day, that’s usually the argument for just buying the seat.

It only sees public profiles. Anyone who has turned off their public profile, or trimmed it down, is invisible to Google. X-ray searches a sample of LinkedIn, not the population.

Matches can be noisy. Google matches text anywhere on the public page, including side modules like “Others named” and related-profile links. A result isn’t a match until you’ve opened it and checked.

No relationship data. No connection degree, no mutuals, no activity signals, no saved lists, no alerts. X-ray finds people; everything after that is on you.

How recruiters use it

The tools that dominate this search term, recruitmentgeek, recruitin and friends, are query builders for recruiters, and that tells you who uses X-ray hardest. The recruiting pattern is worth copying even for sales:

  1. Stack the synonyms. One role, many spellings: ("devops engineer" OR "sre" OR "site reliability"). Candidates describe themselves inconsistently; the OR-stack is how you catch them all.
  2. Search the artefact, not the title. Skills, certifications, tools and college names appear in profile text even when titles are vague. String 4 above finds freshers by skill for exactly this reason.
  3. Contact through the front door. X-ray finds the person; the connection request is the free, legitimate contact channel. A short, specific note does the work, our free note generator is a reasonable starting point, and volume stays inside LinkedIn’s invite limits.

The rules, honestly

Two different activities get blurred together here, and the difference is the whole ballgame.

Searching Google and reading public pages is fine. LinkedIn publishes public profiles to search engines on purpose; members opt in to that via their settings. Running these queries by hand and opening the results is ordinary use of the web.

Automated collection at volume is scraping. LinkedIn’s User Agreement prohibits it explicitly, logged in or not, and the company litigates over it. The practical risk sits mostly with tools that automate your account, visiting hundreds of profiles or firing bulk actions from your login. That behaviour pattern is what gets accounts restricted, and it’s the same pattern whether the list came from X-ray, Sales Navigator or anywhere else.

X-ray, Sales Navigator, or both

Our honest read on when each fits:

  • X-ray alone: occasional sourcing, tight budget, keyword-shaped searches (“who mentions this certification in Pune”). A few hours a month, no seat.
  • Sales Navigator alone: daily sourcing where headcount, seniority and industry filters matter, and where stale data costs you real time. The pricing maths changes by team size, but heavy users usually stop resenting the seat quickly.
  • Both: X-ray for the odd-shaped keyword searches Sales Navigator’s filters can’t express, the seat for everything structured.

Whichever finds the person, the outreach that follows decides whether any of it was worth doing. Finding someone was never the hard part; a message worth replying to is. That’s a separate craft, and our LinkedIn outreach guide covers it end to end.

The short version

site:linkedin.com/in plus quoted phrases turns Google into a free LinkedIn search with real boolean support. Use intitle: for headline matching, in.linkedin.com for India, and the minus sign to cut noise. It’s unbeatable for free keyword digging and hopeless at structured filtering, so verify everything on the live profile, and if you source daily, price up the seat. Read the results by hand, contact people like a person, and X-ray is just the web working as designed.

Frequently asked

FAQ

What is LinkedIn X-ray search?
X-ray search means using an external search engine, almost always Google, to search inside one website. For LinkedIn, that's a query starting with site:linkedin.com/in, which restricts results to public profile pages. You add quoted phrases for the title, skill or city you want. Because the search runs on Google, you don't need to be logged in to LinkedIn and nothing counts against LinkedIn's search limits.
Is X-ray search against LinkedIn's rules?
Searching Google and reading public pages is ordinary web use; LinkedIn publishes those pages to search engines deliberately. What LinkedIn's User Agreement prohibits is scraping: automated collection of profile data, whether logged in or not. Running X-ray queries by hand is fine. Wiring a bot to harvest thousands of results is not, and tools that do it from your account put that account at risk.
Why don't some profiles show up in X-ray search?
Google can only index what LinkedIn shows logged-out visitors. People can switch their public profile off entirely, or trim it to almost nothing, in their settings. Recently created or recently edited profiles may not be crawled yet, and Google itself only surfaces a few hundred results per query no matter how many exist. X-ray search sees a sample of LinkedIn, not all of it.
Is X-ray search better than Sales Navigator?
They solve different problems. X-ray is free and great for occasional keyword digging, but it has no filters for headcount, seniority or industry, and its data can be months stale. Sales Navigator's structured filters, saved lists and alerts are the product you're paying for. If you source people daily, the seat usually earns its keep; if you search a few times a month, X-ray plus a free account covers a lot.

Trusted by Indian founders running real GTM

11
companies
7,400+
connection requests sent
34%
average acceptance rate
2,000+
replies received

Run your LinkedIn pipeline from your device.

OutPilot by Banyan is cloud-native, runs on web and mobile, and is priced in rupees. Your first campaign ships in under fifteen minutes.