If the Threat Includes a Domain Name, DomainTools Has the Intel.
We live by the mantra that with better data, we can provide better answers. Our solutions are comprised of over 15 years of data, which include Whois records, passive DNS data, related screenshots, IP addresses, hosting data, name servers, and other DNS data. DomainTools' data and products work in harmony to enable security teams to start getting ahead of attacks, gain context and visibility into potential threats, and lower the skills barrier.
Iris Investigation Platform
Detect. Investigate. Prevent.
DomainTools Iris is a proprietary threat intelligence and investigation platform that combines enterprise-grade domain and DNS-based intelligence with an intuitive web interface.
Who uses Iris:
- Security analysts and Incident Response teams
- Corporate security teams needing domain-based risk assessment
- Hunt Teams and Cyber Forensic Investigators
- Online Fraud and Brand Fraud Investigators
Domain Risk Score
Predictive security against new threats
DomainTools’ scoring provides a Risk Score to over 300 million domains as soon as we know about them—usually as soon as they are registered. Unlike traditional, reactive reputation feeds, ours assigns Risk Scores to domains before they’ve had a chance to host malware or do damage.
Who uses Domain Risk Score:
- Security Technology vendors wanting to add domain scoring to Host or Network Firewalls, Secure Web Gateways, Messaging Gateways, DNS-filters or other related technologies
- Corporate security teams needing domain-based risk assessment
API Integration
Bigger threats require more advanced solutions
DomainTools’ API Data Services enable customers to access our proprietary domain profile data sets in a programmatic and high-volume API feed. Integrate your solutions, augment existing data sets or build your own solutions leveraging our APIs.
Who uses it:
- Corporations or Government entities wanting domain-profile and forensic data integrated into internal systems
- Industry vendors and partners wanting to integrate DomainTools data
- Solution Vendors developing a new product leveraging our data
PhishEye
Discover phishing domains before they strike
DomainTools discovers more newly-registered domain names every day than any other organization in the world. Leveraging this capability, PhishEye shows you existing and new domains that spoof legitimate brand, product, organization, or other names, so that you can carry out defensive or investigative actions against them.
Who uses it:
- Organizations whose brands or domains are likely abuse targets
- Organizations of high profile on the Internet
- Security teams tasked with protecting employees against phishing attacks
Monitoring Products
Keep track of threat actors, domains, and IPs
Thousands of domains are registered or dropped every day, and it can be challenging to stay informed. DomainTools monitors do the heavy lifting for you, tracking many different kinds of information and sending you alerts as soon as changes are detected.
Who uses it:
- Brand owners
- Corporate security teams
- Domain name investors
Support & Learning
A selection of materials related to security industry topics.
White Papers
Network defense and brand protection techniques gathered from real world investigations.
