LinkedIn X-Ray Search — Boolean Strings, and What Replaces Them
X-Ray search means querying LinkedIn profiles through a search engine instead of LinkedIn itself, using site: and boolean operators. It is free, it needs no Recruiter seat, and it still works. This page gives you copy-ready strings — and shows what an AI does with the same idea when you have five roles open instead of one.
- 60-second shortlist
- Email unlock — no card
- Used in 40+ countries
- E.H.ICU Nurse Manager 94% fitRegional hospital network (1,200 beds) Manchester, UK
- 10y critical care
- Led team of 24
- NMC registered
- J.M.Wind Turbine Service Lead 91% fitOffshore renewables operator Aarhus, DK
- GWO certified
- Siemens SGRE 8MW
- Available in 3 weeks
- P.S.CareTech Solutions Architect 86% fitHealthTech scale-up (Series B) Remote (EU)
- HL7 FHIR + EHR
- Home-care platforms
- Ex-NHS Digital
No Recruiter seat required
X-Ray runs through public search engines against public LinkedIn profiles, so it costs nothing to try.
Strings you can copy today
Working patterns for country, city, title synonyms and skill combinations, with the operators that actually still work.
AI writes and rotates the queries
Instead of one string, the AI plans several, varies title synonyms, and grades every profile against your brief.
The X-Ray patterns that still work
An X-Ray string restricts a search engine to LinkedIn's public profile paths and then filters on title, location and skills. Country subdomains matter: fr.linkedin.com surfaces France, de.linkedin.com surfaces Germany, and that subdomain is often the most reliable location signal you get.
- site:linkedin.com/in "product manager" "Berlin" -intitle:jobs
- site:uk.linkedin.com/in ("head of talent" OR "talent lead") "SaaS"
- site:linkedin.com/in "Python" ("fintech" OR "payments") "Warsaw"
- Add -intitle:profiles -inurl:dir to strip directory and aggregator noise
Why one string is never enough
A single boolean captures one way of naming a job. Real candidates title themselves differently — 'talent partner', 'recruitment lead', 'people & talent'. Sourcers compensate by writing five or ten variants, running them one by one, and reconciling duplicates by hand. That is the part worth automating.
- Title synonyms expand a search far more than adding skills does
- Country subdomains beat typed locations for accuracy
- Search engines de-duplicate poorly across variants — you will see the same person repeatedly
- Result quality decays fast beyond the first two pages, so more queries beats deeper paging
What the AI version does differently
FindHire plans a set of X-Ray queries from your job description, rotates them across searches, hydrates each public profile, and grades the person against the brief — location, languages, experience range, must-haves. Location is verified from the profile itself, including the country subdomain, rather than trusted from the vacancy text. Everything lands in the vacancy pipeline with the profile link attached.
- Query planning and title-synonym expansion from the job description
- Deterministic location verification, so a French profile is never labelled Czech
- Explainable scoring: requirements hit and missed, per candidate
- Optional constant monitoring re-runs the whole thing while the role stays open
Cost
The recruiting CRM, candidate database and public recruiter portfolio are free. An AI LinkedIn search costs 40 F&H tokens and is half refunded when it finds nobody. Constant LinkedIn monitoring is 200 tokens per day with the first day free.
Frequently asked questions
What is LinkedIn X-Ray search?
X-Ray search queries public LinkedIn profiles through an external search engine using operators like site:linkedin.com/in combined with titles, locations and skills, instead of searching inside LinkedIn. It requires no Recruiter licence.
Does LinkedIn X-Ray search still work?
Yes, for public profiles. Coverage varies by search engine and country, which is why running several query variants across several engines returns far more than one perfect string.
How do I X-Ray a specific country?
Use the country subdomain, for example site:de.linkedin.com/in for Germany. The subdomain is usually a stronger location signal than a city keyword, because profile text often lists past locations too.
Is X-Ray sourcing against LinkedIn's rules?
Reading a public profile returned by a public search engine is ordinary web browsing. Automated bulk scraping behind a login is a different matter, and FindHire does not do it — sourcing works from public search results and every candidate keeps a verifiable source link.
Related pages
Ready to try it?
Sign up free — no credit card required.
Run an AI LinkedIn searchPrefer a live walkthrough? Book 30 minutes with us
Online support will show you how Find & Hire works end to end — AI candidate monitoring, the CRM pipeline and your verified recruiter portfolio — set up on one of your own roles.
- One-to-one call with a product specialist
- 30 minutes, free, no card required
- Slots on weekdays, in your own timezone