LinkedIn X-Ray Search: Your Secret Weapon To Find Candidates (2026)

LinkedIn X-ray search is a sourcing technique in which recruiters use an external search engine — most commonly Google — to query LinkedIn's public profile pages directly, bypassing LinkedIn's native search restrictions by combining Google operators (e.g., site:linkedin.com/in/) with Boolean strings to filter candidates by job title, skills, and location. This method allows users to bypass LinkedIn search limitations and access a wider range of profiles.

In this article, I will talk about:

1. What is a LinkedIn X-ray search?
2. Why Use LinkedIn X-Ray Search?
3. What Are X-Ray Search Operators?
4. How To Use LinkedIn X-Ray Search On Google?
5. Google LinkedIn X-Ray Search Tools
6. How To Use X-Ray Search on LinkedIn?
7. How To Find Open To Work Candidates with LinkedIn X-Ray Search

By leveraging Boolean search and other search operators, you can uncover 2nd and 3rd-degree, out-of-network connections and the perfect candidate regardless of your LinkedIn network size.

Here's JB explaining LinkedIn X-Ray and how you leverage it to transform your LinkedIn recruiting process.

What Is LinkedIn X-Ray Search?

LinkedIn X-ray search is a sourcing technique in which recruiters use an external search engine — most commonly Google — to query LinkedIn's public profile pages directly, bypassing LinkedIn's native search restrictions by combining Google operators (e.g., site:linkedin.com/in/) with Boolean strings to filter candidates by job title, skills, and location.

You can find a candidate's profile by entering skills and location into the search bar using Boolean strings. One benefit of X-ray LinkedIn search is the ability to use the * (asterisk) symbol to fill in missing words — the asterisk acts as a wildcard for any other keyword.

X-Ray Search includes the basic Boolean operators AND, OR, NOT for more productive results. It saves time and effort for the searcher and filters information more effectively.

It is also known as Google X-ray search or simply X-ray search. The name comes from the idea of using Google to "X-ray" LinkedIn and see through its limitations.

Why Use LinkedIn X-Ray Search?

LinkedIn X-ray search is worth using for three concrete reasons: it bypasses LinkedIn's commercial-use limit on free accounts, it removes the 1,000-result cap imposed by LinkedIn's native search engine, and it surfaces profiles that are invisible inside LinkedIn because they fall outside your network or have restrictive privacy settings.

1. Bypass the commercial use limit

If you use the basic LinkedIn search engine intensively, you will eventually see the commercial use limitation popup. LinkedIn's commercial use limit is a monthly search cap that LinkedIn automatically applies to free (Basic) accounts when its algorithm detects recruiting or sales behaviour, blocking further people-search results until the cap resets at the start of the next calendar month.

The goal is to make you pay for LinkedIn Sales Navigator or LinkedIn Recruiter.

With LinkedIn X-Ray search, you don't have this problem. You use Google to search LinkedIn accounts as much as you want—you will never be limited.

That makes X-Ray search a great technique to bypass LinkedIn search limitations.

2. Bypass LinkedIn search results limitation

Each time you search the free LinkedIn search engine, you are limited to 100 pages of 10 results. That makes a total of 1000 maximum search results available.

With Google X-Ray Search, you don't have this problem.

When you write a specific query, you get access to all the LinkedIn profiles displayed in the Google search results.

3. Access all LinkedIn members

If you use the LinkedIn search engine to find 2nd and 3rd-degree connections, you will notice that you can't connect with some profiles. You can't even see their names—you will only see the mention: "LinkedIn Member".

This means these people are way out of your network or have activated a specific setting to hide their profiles.

With LinkedIn X-Ray search, you don't have this problem. When indexing LinkedIn profiles, Google doesn't consider your network or specific user settings.

You will then get public access to all LinkedIn profiles that have allowed Google to index them.

Now that you understand the theory let's explore the details of using LinkedIn X-ray search to find potential candidates.

Mastering X-Ray Search Operators

Boolean search operators are logic keywords — AND, OR, NOT — and syntax elements such as quotes and parentheses that instruct a search engine to include, exclude, or combine terms, allowing recruiters to build precise candidate queries on both Google and LinkedIn's native search.

2 types of X-Ray search operators:

1. Google search operators
2. Boolean search operators

1. Google search operators

You can use Google search operators to give specific instructions to the search engine like:

1. Only display search results from this particular site
2. Only display search results with "X" in their Google title
3. Only displays search results with "X" in the page text

Here is a complete list:

• | Wildcard matching any word or phrase. | reid * linkedin ( ) | Group multiple searches. | (sales OR marketing) apple |

Click on the examples link to see what the operator does on the Google search results.

To search LinkedIn profiles, the operators you will use more often are:

• site: to search on LinkedIn
• intitle: to search specific job title
• intext: to search for additional particular keywords in the profiles

To only get LinkedIn profiles in your search results, write:

site:linkedin.com/in/

As all the LinkedIn profile URLs start with linkedin.com/in/ that will only display LinkedIn profiles in your search results.

2. Boolean search operators

Boolean search operators are part of Google search operators. However, it's essential to differentiate them as they can also be used on LinkedIn search engines.

Here is a complete list of Boolean search operators for LinkedIn and Google.

You can click the links in the table to see concrete examples of what the operators do on Google on LinkedIn search.

If you want to use these search strings in Google, you must include them in these Google operators:

• intitle:
• intext:
• inurl:

If we take a LinkedIn recruiting use case, it will look like this:

site:linkedin.com/in/ intitle:"Senior Developer" intext:javascript OR JS

In this search, I am looking for people who have the following:

• Senior Developer in their job title
• JavaScript or JS written somewhere on their profile

To do the exact search on LinkedIn, I would do the following:

• Select People
• Write "Senior Developer" in the job title filter
• Write JavaScript or JS in the keyword filter

How To Use LinkedIn X-Ray Search On Google?

3 steps to use LinkedIn X-Ray search:

1. Write your X-ray search
2. Paste it into the Google search bar
3. Export the results to CSV

1. Write your X-Ray query

As X-ray queries can be long and complicated, I recommend first writing them on a notepad, Google Doc, or Notion page so you can edit them easily.

If you close the window without intention, you don’t want to lose 30 min of work over a dumb misclick. It’s also a good practice to save your X-ray searches over time, as you might improve them and use them again.

2. Paste into Google Search Bar

Once you are happy with your X-Ray query, paste it to Google and press enter to get your results.

Iterate on your expression until you are satisfied with your search results.

3. Export the results to CSV

You have two options once you are satisfied with the search results:

1. Visit all the profiles manually
2. Export them into a CSV I recommend exporting them into CSV, as organizing your outreach will be much easier. The next step would be to import these profiles into your CRM or Applicant Tracking System (ATS).

To do this, we’re going to use Scaleserp. After you create your account, the first step is to copy and paste the URL of your Google search into the URL field.

Then, define the number of pages you want to extract and the number of results per page.

The number of search results per page depends on what you have chosen in your Google settings.

To change it, go to google.com > Settings > Search Settings.

Then, change the number of search results per page, click Save, and you’re done.

Back to Scaleserp. The next thing to do is to define the output. Most of you will need a CSVso you can select the CSV option in the dropdown.

Once the results are ready, you can download them by clicking on the download account in the top right.

You will get a clean CSV with the title of the search results and the LinkedIn URLs.

You’re done!

You can now upload this file to your CRM Software or LinkedIn prospecting campaigns.

Google LinkedIn X-Ray Search Tools

If you want to get precise and automated queries, here are 2 LinkedIn X-Ray search tools to use:

1. Recruit'em
2. Recruitment Geek

1. Recruit'em

Recruit'em is a free tool that helps you create LinkedIn X-ray search queries efficiently and quickly.

You can use Recruit'em to search for profiles on LinkedIn by country, location, keywords, education, current employer, and more.

You can also use Recruit'em to search for profiles on other platforms like Twitter, Facebook, GitHub, Stack Overflow, etc.

To use Recruit'em, fill in the information you want to search for in the fields provided and then click the "Search" button.

Recruit'em will generate a search query for you and open it in a new tab on Google.

You can then see the results and refine your search further if needed.

The advantage of this tool is that it's completely free.

2. Recruitment Geek

RecruitmentGeek is another freemium tool that helps you efficiently create LinkedIn X-ray search queries.

If you don't have the skills yet, you must start by writing a Boolean query to get results, which is a bit more complicated.

Also, the free offer is pretty basic, as Recruitment Geek won't generate a Google search URL but display the first results directly on the page.

They have a premium version at $3.99/month that allows you to specify the country.

It is not worth it, considering you can do that for free and more with Recruit'em.

How To Use X-Ray Search on LinkedIn?

To run X-ray search on LinkedIn's native platform, apply Boolean operators directly in LinkedIn Basic, LinkedIn Recruiter, or LinkedIn Sales Navigator search filters — each tool offers different field coverage and result limits.

You can use it directly in 3 different LinkedIn search engines:

1. LinkedIn Basic
2. LinkedIn Recruiter
3. LinkedIn Sales Navigator

1. LinkedIn Basic X-Ray Search

You can use Boolean search on several fields of the LinkedIn basic search:

1. Job title
2. Keywords
3. School
4. Company

You can do decent searches with LinkedIn's primary engine, but as mentioned at the beginning of this article, you will be limited by the commercial use limit and get access to only the first 1000 results.

2. LinkedIn Recruiter X-Ray search

You can use LinkedIn Boolean search on LinkedIn Recruiter in filters like:

• Job Title
• Skills
• Companies
• School
• Keyword

This tool will be much more powerful if you aim to find right candidates.

LinkedIn Recruiter is a premium tool that offers much more search filters and data to engage your leads with messages that get replies.

3. LinkedIn Sales Navigator X-Ray Search

Last, you can use Boolean search on LinkedIn Sales Navigator.

LinkedIn Sales Navigator is a premium LinkedIn product whose primary mission is to help salespeople identify and reach out to qualified prospects — though recruiters can also use it to source and engage candidates.

You can use Boolean search on filters like:

• Keyword
• Current Job Title
• Past Job Title
• Current Company
• Past Company
• Keywords

That being said, you can also use LinkedIn Sales Navigator to recruit.

It's handy because you can use the same tool to find leads and candidates.

If you want to export your Linkedin Sales Navigator lead lists into CSV files that is easy using the Evaboot Chrome Extension.

It's the smartest Sales Navigator scraper.

Its algorithm double-checks your leads to ensure they match your selected search filters and provides you with data like emails, LinkedIn URLs, Open Profiles, etc.

This tool makes your lead-generation effortless.

Find Open To Work Candidate with LinkedIn X-Ray Search

To find open-to-work candidates with LinkedIn X-ray search, use Google's intitle: operator to target a job title and intext: to match self-reported phrases candidates add to signal availability—such as "open to work", "seeking new opportunities", or "looking for new opportunities"—combined into a single Boolean query.

There are several ways to find job seekers using the LinkedIn search engines, which I describe in this video.

You can also use LinkedIn X-ray search to find them. For that, you can use intitle: "the job you are looking to recruit for" + intext: all the expressions you can think of that someone would add on his profile if looking for a job:

• looking for new opportunities
• seeking new opportunities
• open to work
• etc.

Here is a LinkedIn X-ray search example with accountants:

site:linkedin.com/in/ intitle:accountant intext:(looking or seeking OR open to) AND (opportunities OR opportunity OR jobs OR job OR work)

When I copy-paste this expression in Google, here is what I got:

So now you can copy and paste this expression and replace accountant with another job title or several job titles using AND like:

site:linkedin.com/in/ intitle:"Product Manager" OR "Product Owner" intext:(looking or seeking OR open to) AND (opportunities OR opportunity OR jobs OR job OR work)

What are you waiting for? Try it now!

Bing vs. Google for LinkedIn X-Ray Search

Google and Bing crawl LinkedIn differently. That matters when you're X-Raying for profiles.

Google indexes more LinkedIn URLs faster, which means newer profiles show up sooner. It also returns more results overall — useful when you're casting a wide net.

Bing surfaces older, established profiles more reliably and sometimes returns profiles Google misses entirely. Some recruiters prefer it for senior hires or niche roles where the candidate pool is small and stable.

Try the same X-Ray query on both engines. If Google gives you 300 results and Bing gives you 180, the overlap is rarely 100%. You'll find different people in each set.

X-Ray Search Syntax Variations That Actually Work

Not all X-Ray queries are built the same. Small syntax changes can double your result count.

With vs. without site:
The standard pattern is site:linkedin.com/in/ "software engineer" Berlin. But dropping site: and relying on URL patterns sometimes returns profiles Google didn't index under the site: operator:

linkedin.com/in/ "software engineer" Berlin

You'll get noise (company pages, posts), but you'll also catch profiles that didn't surface in the stricter query.

Alternative URL patterns
Instead of /in/, try /pub/:

site:linkedin.com/pub/ "product manager" London

LinkedIn's /pub/ path is older and less common now, but it still exists in Google's index for some profiles. Worth running if your main query comes up short.

Run both /in/ and /pub/ queries when you're stuck. Combine the results and dedupe manually.

Using Country-Specific Google & LinkedIn Domains

If you're hiring in Germany, searching google.com for LinkedIn profiles returns a global mix. Searching google.de returns profiles weighted toward German-language results and .de LinkedIn subdomains.

Country TLDs
Use the local Google domain:

• google.co.uk for UK candidates
• google.fr for France
• google.ca for Canada

Pair it with LinkedIn's country subdomain in your site: operator:

site:uk.linkedin.com/in/ "data analyst" Manchester

site:de.linkedin.com/in/ "sales director" München

This doesn't guarantee only candidates in that country (people move, profiles stay), but it tilts results toward local profiles and reduces noise from expats or international accounts.

Finding Resumes & CVs with the Filetype Operator

The filetype: operator pulls PDFs, Word docs, and other files from Google's index. Recruiters use it to find uploaded resumes on public sites — university job boards, personal websites, portfolio pages.

Basic resume X-Ray

filetype:pdf resume "software engineer" Python

filetype:doc CV "project manager" London

Target a specific domain
If you know candidates post resumes on a specific university site or job board:

site:jobs.university.edu filetype:pdf resume "mechanical engineer"

Limitations
This only finds resumes uploaded to public web pages. It won't touch LinkedIn profiles, Dropbox, or password-protected career portals. Treat it as a supplement to LinkedIn X-Ray, not a replacement.

When you find a resume, run the person's name through a LinkedIn X-Ray query to pull their full profile.

Ethical & Compliance Notes for X-Ray Sourcing

X-Ray search scrapes publicly visible data. That's legal in most jurisdictions, but it sits in a gray area with LinkedIn's Terms of Service.

LinkedIn's ToS
LinkedIn prohibits automated scraping of its platform. X-Ray search through Google isn't technically scraping LinkedIn directly — you're querying Google's index — but LinkedIn has sent cease-and-desist letters to third-party tools that rely on similar methods.

Use X-Ray search manually. Don't build a bot to run hundreds of queries an hour.

GDPR & outreach
If you're in the EU or contacting EU candidates, GDPR applies. A public LinkedIn profile doesn't equal consent to receive cold emails. You need a legitimate interest basis (recruiting counts) and you must honor opt-outs immediately.

Candidate experience
When you contact someone you found via X-Ray, tell them how you found them. "I came across your LinkedIn profile through a search for senior Rust developers in Berlin" is transparent and builds trust. Vague "I found you online" messages feel creepy.

X-Ray search is a tool. How you use it determines whether candidates respond or block you.

Ready-to-Copy X-Ray Search Examples

Here are six X-Ray queries you can paste into Google and tweak for your role.

Senior backend developer, specific tech stack, exclude recruiters

site:linkedin.com/in/ "senior backend engineer" OR "staff engineer" (Golang OR Rust) -recruiter -talent -HR

Sales leader in a specific city

site:linkedin.com/in/ "VP Sales" OR "Head of Sales" "San Francisco Bay Area"

Product manager with B2B SaaS experience

site:linkedin.com/in/ "Product Manager" "B2B SaaS" OR "enterprise software"

Marketing hire, exclude agencies

site:linkedin.com/in/ "Marketing Manager" OR "Growth Marketing" -agency -consultant -freelance

Recent CS graduate looking for first role

site:linkedin.com/in/ "Computer Science" "Bachelor" OR "BSc" "seeking opportunities" OR "open to work" 2023..2024

Engineering manager in fintech, exclude current employees at competitor

site:linkedin.com/in/ "Engineering Manager" fintech OR "financial technology" -site:linkedin.com/company/stripe

Replace role titles, skills, and locations with what you're hiring for. The structure stays the same.

Excluding Recruiters, Agencies & Current Employees

The minus operator (-) is how you filter out noise in X-Ray queries. Use it to exclude recruiters who match your keywords, agencies, consultants, or people currently working at competitors.

Exclude recruiters
Recruiters often have "engineer" or "developer" in their LinkedIn summary from roles they're hiring for. Add these terms:

-recruiter -talent -"talent acquisition" -HR -headhunter

Full example:

site:linkedin.com/in/ "software engineer" Python -recruiter -talent -HR

Exclude agencies & consultants
If you want full-time employees, not contractors:

-agency -consultant -consulting -freelance -contractor

Exclude employees at a specific company
Use -site:linkedin.com/company/[company-name]:

site:linkedin.com/in/ "data scientist" -site:linkedin.com/company/meta

This removes anyone currently listing Meta in their experience section (or at least, anyone whose profile URL includes /company/meta).

Combine multiple exclusions

site:linkedin.com/in/ "product designer" Figma -recruiter -agency -freelance -site:linkedin.com/company/google

The minus operator is forgiving — you can stack as many exclusions as you need. Just don't go overboard; every exclusion shrinks your pool.

Boolean Search in Recruitment

Boolean search is the foundation of X-Ray sourcing. It's the syntax recruiters use to combine keywords, exclude terms, and narrow results to the exact candidate profile they need.

The three operators recruiters actually use

Why it matters in recruitment
Job titles vary. A "Customer Success Manager" at one company is a "Client Services Lead" at another. Boolean OR lets you cast a wide net without running ten separate searches.

Skills stack the same way. Instead of searching for "React" and hoping you catch everyone, search for (React OR Vue OR Angular) and pull front-end developers regardless of which framework they prefer.

Grouping with parentheses
Parentheses control operator precedence. Without them, Google interprets your query left to right and you get unexpected results.

site:linkedin.com/in/ ("VP Sales" OR "Head of Sales") (SaaS OR "enterprise software") -consultant

This says: title must be VP Sales or Head of Sales, and experience must mention SaaS or enterprise software, and exclude consultants.

Without the parentheses:

site:linkedin.com/in/ "VP Sales" OR "Head of Sales" SaaS OR "enterprise software" -consultant

Google reads this as: "VP Sales" or (everything else), which returns a mess.

Boolean search works everywhere
The same operators work in Google, Bing, LinkedIn's native search (when you pay for Recruiter), ATS keyword filters, and most sourcing tools. Learn it once, use it everywhere.

Conclusion

LinkedIn X-ray search is a sourcing technique that uses Google to bypass LinkedIn's native search limits and surface candidates who are otherwise invisible.

You can run X-ray searches on Google, Bing, or DuckDuckGo, and combine site: operators with Boolean strings to filter by title, skills, and location. You can also use intext: to find candidates who self-report availability.

Whether you're a recruiter, sales manager, or job seeker, X-ray search helps you connect with the right people on LinkedIn — without hitting commercial-use walls.

Frequently asked questions