Short answer: X-ray search means searching LinkedIn from outside it, by asking Google for pages on linkedin.com that match your criteria. The whole technique is one operator — site: — plus the ordinary Google syntax around it. It is useful for three specific things LinkedIn's own search does badly, and useless for everything else, because Google can only match words that appear on a public profile page.
site:linkedin.com/in "head of finance" ("logistics" OR "freight") -recruiter
The operators, and what each one is for
site:linkedin.com/in— people profiles only. Usesite:linkedin.com/companyfor company pages andsite:linkedin.com/jobsfor postings. Without the path, results mix all three."quoted phrase"— exact match. Job titles need quotes, or Google will return pages with the words scattered.OR— alternatives, in capitals, usually bracketed:("VP Sales" OR "Head of Sales").-word— exclusion.-recruiter -coachremoves most of the noise in any seniority search.intitle:— matches the profile's title tag, which is the person's name plus their current headline. Narrower and cleaner than a body match.inurl:— matches the URL. Mostly useful as a country filter:inurl:uk.linkedin.comorinurl:de.linkedin.com.
Three jobs it does better than LinkedIn's own search
- Searching without being logged in. No account, no commercial-use limit, no search history attached to your profile. Useful when you want to look at a market before you commit a seat to it.
- Matching words LinkedIn does not filter on. LinkedIn filters on structured fields — title, company, headcount, geography. Google matches the whole visible page, so a phrase that only appears in someone's About section or a project description is findable through Google and not through LinkedIn.
- Finding profiles by a word combination with no filter equivalent — a certification, a product name, a former employer written in free text.
A worked example of the second: site:linkedin.com/in "head of operations" "ISO 13485" finds operations leads who mention a medical-device quality standard anywhere on the page. No LinkedIn filter expresses that.
What it cannot do — the honest limits
This is where most X-ray guides stop being useful, so plainly:
- Only what Google indexed. Profiles set to not appear in search engines are absent, and plenty of senior people set exactly that. X-ray results are a subset of LinkedIn, never all of it.
- No structured filters. Headcount band, seniority level, years in role, recent job change — none of these are words on the page, so none can be matched. For audience definition by firmographics, Sales Navigator's filters are not replaceable by a search string.
- Results are capped and ranked, not enumerated. Google shows you a few hundred results at most and orders them by its own relevance, so an X-ray search is not a complete list and cannot be counted on as one.
- No contact details. A profile page shows no work email and no phone. Finding the person and reaching them are separate steps whichever route you took.
- Staleness. Google's copy of a profile can be months old, so a title in the snippet may already be wrong.
When to use which
A simple rule that holds up: if your audience is defined by attributes — size, seniority, industry, location — use Sales Navigator, because those are filters. If it is defined by a phrase — a certification, a tool, a niche role title nobody standardised — X-ray it, because phrases are what Google matches. Most real audiences need both: the filters to draw the boundary, a phrase search to catch the people the filters miss.
Once you have the people either way, the list still has to become contactable. Exporting a Sales Navigator search and attaching verified addresses is what the LinkedIn scraper does; starting from profile URLs you collected by hand is the LinkedIn email finder. Measured across all exports, a work email comes back for 36.3% of rows and 10.0% are confirmed by an accepted delivery, with no charge on rows where nothing is found.
If you would rather express the audience in operators inside LinkedIn instead of on Google, that is Boolean search rather than X-ray — same logic, different place to type it: LinkedIn Boolean search.
Five strings worth keeping
- Seniority in a sector, recruiters removed:
site:linkedin.com/in ("VP Sales" OR "Head of Sales") "SaaS" -recruiter -coach - One country only:
site:linkedin.com/in inurl:uk.linkedin.com "operations director" "manufacturing" - Alumni of a specific employer:
site:linkedin.com/in "formerly at Stripe" "product manager" - Company pages in a niche:
site:linkedin.com/company "dental clinic" "London" - Headline match rather than page match:
site:linkedin.com/in intitle:"chief financial officer" "insurance"
Frequently asked questions
Is LinkedIn X-ray search allowed?
You are reading Google's index of pages LinkedIn published publicly, so the search itself is ordinary use of a search engine. What creates risk is never the query but the pace: scripting hundreds of automated Google queries will get your IP blocked by Google, not by LinkedIn.
Why do I get fewer results than LinkedIn shows?
Because X-ray only reaches profiles Google has indexed, and Google caps and ranks what it returns. The gap is expected and it is the main reason X-ray cannot be the only sourcing route.
Does it work without a LinkedIn account?
Yes for the search, and that is its main advantage. Opening a result will usually meet a login or signup wall, so you can see who exists without a seat but not browse freely.
Can I get emails from an X-ray search?
Not from the search itself — profile pages carry no contact fields. The addresses are a separate lookup step, from the profile URLs you collected.
X-ray or Boolean search — which should I learn?
Both are the same logic. Boolean inside LinkedIn keeps the structured filters available, which usually matters more; X-ray on Google matches free text LinkedIn will not filter on. Learn the filters first and keep X-ray for what they cannot express.