DomainTools

DomainTools
Identify, investigate, and prevent


Register as a Partner


+2,100
MSP Partner


+35.000
Customers


35 Million
Protected users per month


100 Billion
Protected daily queries


dedicated email
sales@dotforce.it

DomainTools

Enterprise-grade intelligence to prevent, mitigate, and investigate attacks.

DomainTools® is the most authoritative source of Internet intelligence and a key component of the best security and threat hunting programs.

An accurate map of the Internet allows for detecting and predicting emerging threats, enabling security teams to prevent, mitigate, and investigate ongoing attacks.

Why Choose DomainTools?

  • Over 20 years of historical and point-in-time data.
  • Domain activity reports.
  • 13 billion domains and IP addresses.
  • 97% Internet coverage.
  • 200,000 observations per second.
  • 5 million new or updated domains per day.
  • Real-time predictive risk scoring.



Iris® Internet Intelligence Platform

The first place to go when you need to know.

When time and accuracy are critical factors, DomainTools is the first reference point for professionals who want to quickly obtain information and take decisive action to protect their organization. Iris is a proprietary threat intelligence and analysis platform that combines enterprise-grade domain and DNS-based intelligence with an intuitive web interface.

Iris Detect

Discover and monitor similar domains with unmatched speed and coverage.

Learn more

Iris Enrich

Integrate DomainTools® data with SIEM, SOAR, and other tools

Learn more

Iris Investigate

Map connected infrastructure to anticipate threats

Learn more


Iris Detect

Iris Detect is a detection, monitoring, and enforcement tool for Internet infrastructures (UI and API) powered by the fastest and most comprehensive domain discovery engine in the industry and the largest domain data databases.
By capturing key data on new domains and assigning them a risk score within minutes of discovery, Detect is a game changer for brand managers, fraud prevention teams, digital risk teams, and network defenders.
Benefits:

  • Rapid discovery of domains that violate copyrights.
  • Continuous monitoring of evolving infrastructure.
  • Enforcement actions for dangerous domains.

Iris Detect

The DomainTools Iris dataset helps analysts, detection engineering teams, threat hunters, and other professionals gain critical situational awareness on domains or IP addresses observed in the protected environment.
Whois, DNS, SSL certificate, and risk scoring elements help create the necessary context for appropriate indicator disposition.
Iris Enrich APIs are REST-based and OpenAPI-compatible, making it easy to incorporate into your internal tools.
Benefits:

  • Comprehensive data sources.
  • Insights into emerging threats.
  • Infrastructure risk assessment.
  • Supports high query volumes for domain name attributes.
  • Creates a seamless data view to facilitate the transition from SIEM alert to human analysis.

Iris Investigate

Iris Investigate combines enterprise-grade domain intelligence and risk assessment with industry-leading passive DNS data.
An intuitive web interface and corresponding APIs query these data sources to help security teams quickly and efficiently investigate potential cybercrimes and cyber espionage.
Why choose SpyCloud Identity Guardians:

  • Sophisticated connections between datasets.
  • Comprehensive data sources.
  • Investigation workflow management.
  • Infrastructure risk assessment.


SpyCloud helps reduce the workload of your IT and security team, making it easy to discover and remediate compromised accounts. Save time and protect your company with a system that not only detects threats but also resolves them automatically!

Threat Intelligence

DomainTools covers nearly the entire Internet to deliver the best near real-time threat intelligence. Act before malicious actors do.

Domain Hotlist

Daily Risk-Scored Domain Database

Each update contains domains associated with passive DNS activity in the last day, with a threat profile score of 90+ and/or a proximity score of 70+.

API Integration

DomainTools data services API allow customers to access our proprietary domain profile datasets in a programmatic and high-volume API feed.

Integrate your solutions, enhance existing datasets, or build your own solutions using our APIs. Ideal for:

  • Corporations or government entities seeking integrated domain profiles and forensic data in their internal systems.
  • Industry vendors and partners who want to integrate DomainTools data
  • Solution vendors developing a new product using our data

Monitoring Products

Thousands of domains are registered or dropped every day, making it difficult to stay informed.

DomainTools monitors help you do your best by tracking many different types of information and sending alerts as soon as changes are detected. Suitable for:

  • Registered brand owners
  • Corporate Security Teams
  • Domain Name Investors


Register as a Partner CoreTech

Take advantage of the benefits and discounts reserved for you


Sign up for Free


Request the Trial

Try it for free, you’ll love it!


Free Trial, presto disponibile


Datasheet