Accurate and reliable information security data and tools are a go.

Save time gathering and correlating data, so you can focus more on securing your infrastructure.

Try it for FREE









Contact us

Queries per month
Queries included. One page includes a maximum of 100 results
50 1,500 20,000 65,000 Flexible
Current DNS records
More than 3 Billion DNS records looked up each day
Historical DNS records
12 years of historical DNS with daily granularity
Get Subdomains
Our API returns a huge collection of subdomains
Domain whois
Current WHOIS
Fetch up-to-date WHOIS information
Historical WHOIS
5 years of historical WHOIS, revealing changes in domain ownership
Reverse WHOIS searching
Get domains by searching for information in individual WHOIS fields
WHOIS searching ×
IP address research
Navigate through IP subnets and neighborhoods
Reverse DNS searching
Reverse PTR searching and summaries
× ×
Advanced features
Domain Specific Language for doing complex queries
× ×
Associated domains
Map a company's footprint by finding similar domains
× ×
Consulting services
A broad range of assistance in getting started or building custom data sets
× × 1h on-boarding call 1h on-boarding call
For commercial use ×
Free Buy now Buy now Buy now Contact us


Need more?

Contact us for unlimited queries and VIP support.

Contact Us

If you're a student or researcher wanting to use our products please contact us.

SecurityTrails API™

Sign up for free and get 50 queries a month. Check current and historic DNS records, plus domain and IP data, or pick a more robust solution with WHOIS capabilities.

Learn more


Explore the surface of any organization: Know DNS records, associated domains, IP blocks, open ports, and much more, from a friendly web-based interface.

Learn more

Attack Surface Reduction™

Mitigating risk is easy with asset inventory, discovery tools, and monitoring. ASR is a customized solution, please contact us for an estimate.

Learn more

SecurityTrails Feeds™

The latest intel updated daily. Keep up with changes in Domain/subdomain, SSL certificates, internet-facing assets, and more. Since Feeds is a customized solution, please contact us for an estimate.

Learn more


Know everything about a single domain or any organization's public surface instantly.

Fast Internet scans: Updated daily and curated to detect open ports; fetch domain intelligence and critical IP data in seconds.
Search by: Company name, domains, subdomains, TLDs, registrar, DNS values (MX, NS, CNAME, SOA Mail, IPv4, IPv6) WHOIS entries, domain creation, and experation dates.
Company intel: Find IP blocks, associated domains , subdomains, reverse DNS entries, certificates, WHOIS entries, and DNS history.
IP data: Get accurate IP geolocation, ASN information, IP type, logged user-agents, and more.


Attack Surface Reduction™

Attack Surface Reduction™

Gain total understanding of your internet-facing infrastructure and manage all your assets easily.

Inventory management: An easy-to-use web-based dashboard allows you to pivot between IP blocks, domain names, SSL certificates, WHOIS registrars and DNS records.
Attack surface intel: Get the full picture about your company’s attack surface, see all open ports, affected IPs, domains, hosting provider and more.
Risk detection: Understand the different security risk that your project may be facing, including: open database ports, self signed certificates, and exposed staging/dev subdomains.
Comprehensive IP tools: Find IP geolocation, port history, associated devices, IPs, user-agent activity, hosted domains, P2P activity logs, remote access and detected VPNs.


Get curated and current feeds for your cybersecurity team. Put our data to work on all your web, terminal, and desktop applications for greater awareness.

Domain data: Access a complete list of all domains (ccTLD and gTLD), DMARC scans and full list of subdomains.
Company intel: Use associated domains to reveal real domain attribution, plus explore all certificate transparency log data.
IP & port data: Shine a light on exposed apps and services with exhaustive active and passive port scans.
Custom feeds: Get fully customized data that's tailored to your applications.

SecurityTrails Feeds™ is a custom solution. Contact us for an accurate estimate.

Domain feeds

X Fill out the form and we will get in touch with you!

Fill out the form.

Trusted by

"SecurityTrails solves the headache of accurately mapping a company's footprint with data you can't find anywhere else. If you are a security analyst or developer, you will get tremendous value from the most current domain intel through their API."

Bill Ladd | Recorded Future

"The SecurityTrails API was not only easy to integrate but the richness of the data really elevated the capabilities of SpiderFoot."

Steve Micallef | Spiderfoot

"We spent a ton of time and effort building out our own domain lists, but we gave up when we found SecurityTrails – the data was better than anything else we've seen, and allowed us to focus on our core product."

Ben Dowling | IPinfo.IO

"We were dreading parsing and storing WHOIS and DNS data until we found SecurityTrailsAPI. We integrated in just a day."

Jonathan Weber | AbuseIPDB

"The wealth of information really is incredible and available through a great API."

Todd Robinson | InMotionHosting

"SecurityTrails is my source of truth when it comes to threat hunting and research. The speed of the API is crazy and the integrations with automation tools and SIEM tools makes it an easy choice."

Mickey Perre | Splunk

Service Disruption

API, SurfaceBrowser
Feb 4th, 04:22 PM

Test status - UPDATED

“ Identifying the issue ”
impact: none | status: identified
API, Feeds
Feb 4th, 04:19 PM

Api and Feeds pages effected

“ Investigating the issue with the Api ”
impact: minor | status: investigating
Corporate Website
Jan 27th, 12:01 PM

Main site minor issue

“ Site test issue that was identified and in the process of resolution. Our staff is working to mitigate the issue. ”
impact: minor | status: identified