Top Rated Threat Intelligence API Platform Alternatives

Cyberint, a Check Point Company

(119)

4.6 out of 5

Visit Website

Threat Intelligence API Platform Reviews & Product Details

admin

Threat Intelligence API Platform Product Details

Claimed

We provide threat intelligence APIs with comprehensive information on hosts and the infrastructure behind them. By combining data obtained from various providers, our own exhaustive internal databases, and by analyzing host configuration in real-time, we provide threat intelligence APIs that offer an in-depth perspective on the target host and crucial threat detection for any system.

Seller

Threat Intelligence Platform

Discussions

Threat Intelligence API Platform Community

Product Description

Overview by

Alexandre Francois

Threat Intelligence API Platform Media

Threat Intelligence API Platform Demo - Domain's Infrastructure Analysis API

For a given domain name, get a collection of its web, mail, and name servers as well as its known subdomains. For each infrastructure entry, find out its IP address, geolocation, and subnetwork information.

Threat Intelligence API Platform Demo - SSL Configuration Analysis API

For a given domain name, establish and test SSL connection to the host and analyze how it is configured - to detect common configuration issues potentially leading to vulnerabilities.

Threat Intelligence API Platform Demo - SSL Certificates Chain API

For a given domain name, get detailed information about its SSL Certificate and the complete SSL Certificates chain. The data is provided in a unified and consistent JSON format and could be easily integrated with your system.

G2 reviews are authentic and verified.

Here's how.

Lohan A.

Small-Business (50 or fewer emp.)

12/28/2019

"Vetting Prospective Clients with Threat Intel Data"

5/5

What do you like best about Threat Intelligence API Platform?

I’ve been working in marketing for 10 years now. So far, TIP’s products are possibly the easiest I used for conducting background checks on a client’s IT infrastructure. For instance, the vendor’s products allow uncovering a potential partner’s exposed cyber assets with SSL Configuration Analysis API.

The second thing I particularly like about the products is their straightforward user interfaces (UIs) for overall threat intelligence analysis. The dashboard doesn’t require much input. Often, only a domain name is required for queries. Review collected by and hosted on G2.com.

What do you dislike about Threat Intelligence API Platform?

Perhaps nontechnical users may feel a bit intimidated about the output formats when they first use the products. But they’ll soon discover that the benchmarks used in the analyses are in layman’s terms. There are also detailed descriptions available on the vendor’s site for each output parameter. Review collected by and hosted on G2.com.

Recommendations to others considering Threat Intelligence API Platform:

I’ve known through years of experience that a company’s reputation is not limited to what people see or know about them. You also have to look at a company’s technical infrastructure, as it could paint a very different picture of what goes on internally.

As a digital marketing agency, a great deal of our interaction with clients and third parties occurs online. As we don’t always see them face-to-face, we need to establish that these people or companies are 100% reliable. We’re all well aware that fraudulent activities are rampant everywhere, so we want to ensure that we’re not doing business with the wrong guys. For that purpose, TIP provides us valuable intelligence on potential clients without being too invasive. Review collected by and hosted on G2.com.

What problems is Threat Intelligence API Platform solving and how is that benefiting you?

We wanted to solve three things before we stumbled upon TIP—vet clients and make sure they’re not associated with criminal activities, maintain our excellent reputation, and evaluate new publication partners for our clients. If we were to do all these in a traditional way (e.g., through interviews and surveys), it would all be labor-intensive and time-consuming. We opted for a solution that’s easy to integrate, and we haven’t looked back since.

TIP’s components like SSL Configuration Analysis API, Domain Reputation Scoring API, and Connected Domains API allow us to dig deeper into all public-facing web assets associated with the businesses that approach us. The products are cost-effective and save us time. Review collected by and hosted on G2.com.

Anna D.

Mid-Market (51-1000 emp.)

1/25/2020

"Improving our geo data with Threat Intelligence APIs"

5/5

What do you like best about Threat Intelligence API Platform?

Domain Infrastructure Analysis API and Domain Reputation API contribute nicely to our security and data enrichment protocols. With these APIs, we can check IP addresses for possible malicious associations before we add them to our database. Besides, Threat Intelligence Platform has an intuitive user interface to build rather comprehensive reports. That’s good as you don’t have to be a tech expert to operate it. Review collected by and hosted on G2.com.

What do you dislike about Threat Intelligence API Platform?

This might be standard for this kind of APIs, but it may take a few seconds to gather full reports from the Domain Reputation API. As such, the score retrieval process can be a bit slow. However, because it provides a comprehensive analysis, it is something we can live with. Review collected by and hosted on G2.com.

Recommendations to others considering Threat Intelligence API Platform:

If you don’t want to experience a slowdown in Domain Reputation API, you can use the fast input mode. You will have to deal with fewer parameters. But if you are trying to work on potentially malicious IP addresses and need access to comprehensive details, it is probably better to use the full input mode. Review collected by and hosted on G2.com.

What problems is Threat Intelligence API Platform solving and how is that benefiting you?

Our job as an IP geolocation service provider is to gather all relevant geolocation data points such as country, region, city, postal code, latitude and longitude, and time zone in real-time for as many IP addresses as possible.

We also aim to bring context regarding the domains and servers connected to IP addresses as a premium service and we started using the various Threat Intelligence APIs mentioned for that purpose. It’s always better to gather data from several sources for crosslinking, enrichment, as well as to verify accuracy.

Overall, Threat Intelligence Platform’s products have helped us make our data more valuable and insightful for our customers. It has also allowed us to take an angle on cybersecurity as some IP addresses are identified as malicious (i.e., due to record and server misconfigurations, inadequate SSL certificates, showing up on malware feeds, etc.) and therefore don’t bring much to the table for marketing ends and surely should be blocked. Review collected by and hosted on G2.com.

Tomas D.

Small-Business (50 or fewer emp.)

1/21/2020

"A Good Way to Screen Publication Partners"

5/5

What do you like best about Threat Intelligence API Platform?

Our company deals with different publication partners regularly. It’s simply essential for us to know if they are trustworthy and will not expose our site to any security threats should we decide to work with them.

For several weeks now, we have been overall satisfied with how several Threat Intelligence APIs helped us achieve our goal. As the point person for vetting third-party partners, I particularly like working with Domain Malware Check API and Connected Domains API.

Domain Malware Check API makes it is easy for us to see if a third-party site hosts any malicious code or is part of a malware distribution network. We use Connected Domains API, meanwhile, to dig deeper into a particular domain or IP address. The tool uncovers if it has any subdomains connected to malicious domains.

We also like that the service is easy to use. All you need to do is input the domain or IP address into the search field and get results within seconds. The results are easy to understand. But should you find that some are too technical, you can click the question mark icon beside a warning description for an explanation. Review collected by and hosted on G2.com.

What do you dislike about Threat Intelligence API Platform?

It might be too early to tell but so far there is nothing in particular that we disliked. We have been using the APIs for some weeks and have not encountered issues. Review collected by and hosted on G2.com.

Recommendations to others considering Threat Intelligence API Platform:

If you want to see how the product can work for your needs, avail of the free trial first. Use the free credits to get familiar with the product before purchasing a plan that suits your requirements. Since we regularly use the tool, we decided to go with the yearly subscription. Review collected by and hosted on G2.com.

What problems is Threat Intelligence API Platform solving and how is that benefiting you?

Threat Intelligence Platform allows us to get a detailed look at all our existing and potential publication partners’ domains and IP addresses. We can also check incoming traffic for threats with it. In short, it has been instrumental for us to ensure that we are not working with partners who can expose us to cyber attacks. Review collected by and hosted on G2.com.

Albert R.

Mid-Market (51-1000 emp.)

1/2/2020

"Threat Intelligence Platform Lets Us Track Dangerous Domains"

5/5

What do you like best about Threat Intelligence API Platform?

We make it a point to know everything there is to know about domains and so we’ve been using various features offered by Threat Intelligence Platform for some years now. We especially like using Domain Reputation Scoring API, Domain Malware Check API, and SSL Configuration Analysis API to know if there are potentially dangerous domains that we need to monitor.

More precisely, we like that the platform allows us to type the domain name or IP address into the search field, and it automatically gives comprehensive information. A summary of the results for each API check appears in the header so we can immediately see which items (i.e., the ones marked with exclamation points) need our attention.

For instance, when we enter a domain name or IP address, the platform warns us if it has ties to malicious domains or contains harmful content with the Domain Reputation Scoring API. It also lets us know if the domain is playing host to malware with the Domain Malware Check API. And finally, it tells us if it has Secure Sockets Layer (SSL) vulnerabilities and misconfigurations with the SSL Configuration Analysis API. These and other components tell us if a domain or an IP address is safe or unsafe to access.

The platform allows our organization to take a proactive stance toward cyber defense by giving us actionable insights on domains that may negatively affect our network. Review collected by and hosted on G2.com.

What do you dislike about Threat Intelligence API Platform?

It is not something we dislike, but the domain score could be a little bigger. When we first used the tool, it took us a while to see the domain reputation score. If it were made more prominent, then we would have seen if from the get-go. Other than that, there is nothing that we would say is dislikable with the platform. Review collected by and hosted on G2.com.

Recommendations to others considering Threat Intelligence API Platform:

Choose the plan that makes sense for you. If you’re unsure about how many queries you need to make, then start with the one-time pricing option. Once you have a better perspective, you can switch to a monthly or yearly subscription for a discount for a given number of credits. Review collected by and hosted on G2.com.

What problems is Threat Intelligence API Platform solving and how is that benefiting you?

The platform gives us detailed information from a massive array of data sources. That assures us that the results paint a clear picture of the state of a domain’s or an IP address’s security. With it, we can make sure that each domain does not resolve to malicious IP addresses; have host, SSL, and mail exchange (MX) and name server misconfigurations; have invalid SSL certificates; contain malware; have open ports that can be abused; and more. With it, we realized that a single product could provide exhaustive reports for forensic investigations and domain analyses. Review collected by and hosted on G2.com.