DomainTools

DomainTools provides a DNS-focused threat intelligence platform with passive DNS data, historic Whois and RDAP records, a Predictive Risk Score for domains, and an API. Analysts use it to investigate infrastructure, pivot between domains, IP addresses and name servers, and receive feeds of newly observed risky domains.

The website describes customers as enterprises, governments, law enforcement and security platforms, with use cases including threat hunting, incident response, fraud prevention and brand protection. It states that the company has over 800 global customers and describes itself as an enterprise SaaS security firm. The company also lists OEM and public sector offerings and integrations with SIEM, SOAR and TIP products.

The company states it was founded in 2002. Its website lists a public sector page, a DomainTools MCP offering and a Real-Time Threat Feeds product. The website does not state a headquarters city; the 11 open job postings list US locations, mostly with remote options, across engineering, product, sales, marketing, customer success and IT, plus one remote role in England, GB.

Product: DNS intelligence platform with passive DNS, historic Whois/RDAP records, domain Risk Scoring, API and IrisQL search for security teams.