--- title: Criminal IP Reviews meta_title: 'Criminal IP Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 11 reviews by the users' company size, role or industry to find out how Criminal IP works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 11 scale: '5' date_modified: '2026-08-07' parent_category: name: System Security url: https://www.g2.com/categories/system-security --- # Criminal IP Reviews **Vendor:** Criminal IP **Category:** [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence) **Average Rating:** 4.5/5.0 **Total Reviews:** 11 ## About Criminal IP Criminal IP is a cyber threat intelligence solution that provides decision-ready threat intelligence, and attack surface management solutions to security teams worldwide. By continuously scanning the global internet, Criminal IP aggregates and contextualizes threat signals across IPs, domains, URLs, and attack infrastructure, covering malicious indicators, known vulnerabilities, exposed assets, and attacker behavior. Criminal IP's mission is to give organizations real visibility into their cyber landscape and accelerate threat detection and response by delivering the intelligence needed to outsmart attackers. ## Criminal IP Pros & Cons **What users like:** - Users appreciate the **automation capabilities** of Criminal IP, enabling efficient navigation and real-time threat data visualization. (1 reviews) - Users appreciate the **ease of use** of Criminal IP, finding it accessible and intuitive for navigating complex security data. (1 reviews) - Users appreciate the **user-friendly interface and powerful toolkit** of Criminal IP, enabling seamless navigation and real-time threat visualization. (1 reviews) - Users commend the **quick response time** of Criminal IP, enabling effective action on security threats in real-time. (1 reviews) - Users find the **setup ease** of Criminal IP to be impressive, allowing quick integration without complexity. (1 reviews) **What users dislike:** - Users face a **difficult learning curve** with advanced search filters, impacting their overall experience with Criminal IP. (1 reviews) - Users find the **insufficient training** on advanced search filters creates a learning curve and hinders effective usage. (1 reviews) - Users experience **slow loading** issues with Criminal IP's interface, which can hinder timely access to live data. (1 reviews) ## Criminal IP Reviews ### 1. Comprehensive IP Intelligence in One Place **Rating:** 4.0/5.0 stars **Reviewed by:** Jiin J. | Cybersecurity Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** June 18, 2026 **What do you like best about Criminal IP?** The best part for me is the convenience. Instead of gathering information from several different sources, Criminal IP gives me a broad view of an IP or domain in seconds. It's fast, intuitive, and helps streamline security investigations. **What do you dislike about Criminal IP?** I don't have any major complaints, but I think the user onboarding experience could be improved a bit. Since the platform provides a wide range of security data, a few more guided explanations for beginners would be helpful. **What problems is Criminal IP solving and how is that benefiting you?** Criminal IP helps solve the problem of fragmented threat intelligence by bringing together IP and domain reputation, open port information, vulnerability data, and other security insights in one place. This saves me time during investigations and allows me to identify potential risks more quickly without relying on multiple tools. As a result, my workflow becomes more efficient and I can make security-related decisions with greater confidence. ### 2. Milestone rules and ways **Rating:** 3.5/5.0 stars **Reviewed by:** Said B. | Work Group Home, Entertainment, Small-Business (50 or fewer emp.) **Reviewed Date:** June 17, 2026 **What do you like best about Criminal IP?** Criminal IP is a security analysis tool designed to help professionals detect and investigate online threats, often used in the context of threat intelligence. **What do you dislike about Criminal IP?** it must be used ethically and in compliance with the applicable laws. **What problems is Criminal IP solving and how is that benefiting you?** It allows to: → Identify infrastructures linked to criminal activities → Search for traces of information leaks (e.g., passwords, exposed servers) → Corroborate digital investigations with reliable data ### 3. Rich IP Context That Speeds Up Daily Threat Investigations **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** March 13, 2026 **What do you like best about Criminal IP?** One of the things I appreciate most about Criminal IP TI is how much context it provides for an IP address. When investigating alerts from firewalls, IDS, or SIEM systems, I often need to quickly determine whether an IP is suspicious or simply part of normal internet traffic, significantly reducing the time spent manually searching across multiple OSINT sources. It's useful for daily security investigations: from an IT operations perspective, having quick access to threat intelligence speeds up incident triage. If a monitoring system flags an external connection, I can quickly search the IP in Criminal IP TI and immediately see whether it has been associated with malicious activity or suspicious infrastructure. Implementation is fairly easy because the platform is web-based and provides an API. IT teams can start using the platform immediately through the web interface, and integration with monitoring tools can be done later through the API. It has strong API and automation options. **What do you dislike about Criminal IP?** While the platform is powerful, the amount of data available can initially feel overwhelming. New users may need some time to understand all the data points, filters, and risk indicators presented in the interface. For smaller organizations or IT/Software Dev departments with limited budgets, access to full threat intelligence features and large API quotas could potentially be expensive. **What problems is Criminal IP solving and how is that benefiting you?** Faster Investigation of Suspicious IPs: one of the most common problems IT teams face is investigating alerts triggered by unknown IP addresses. This tool helps solve this by providing quick visibility into the reputation and activity of an IP, allowing teams to decide whether to block it or ignore it. Reducing Manual OSINT Research: without a tool like Criminal IP TI, IT teams often need to check multiple platforms to gather information about suspicious infrastructure. Criminal IP centralizes this data, which significantly reduces investigation time. Improving Security Decision-Making: by providing threat scoring, infrastructure details, and attack history, Criminal IP TI helps IT teams make more informed decisions when responding to alerts. - [View Criminal IP pricing details and edition comparison](https://www.g2.com/products/criminal-ip-criminal-ip/reviews?filters%5Bnps_score%5D%5B%5D=4§ion=pricing&secure%5Bexpires_at%5D=2026-08-14+09%3A34%3A48+-0500&secure%5Bsession_id%5D=6884aefb-33eb-4f58-b7a9-3288d7ce020f&secure%5Btoken%5D=b48460321fda744b252944ad8870b9676362e2ee343a69cad3402dd99a7f3d54&format=llm_user) ## Criminal IP Integrations - [Cisco XDR](https://www.g2.com/products/cisco-xdr-cisco-xdr/reviews) - [FortiSOAR](https://www.g2.com/products/fortisoar/reviews) - [Hybrid Analysis](https://www.g2.com/products/hybrid-analysis/reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - [IBM QRadar SOAR](https://www.g2.com/products/ibm-qradar-soar/reviews) - [Maltego](https://www.g2.com/products/maltego/reviews) - [NMAP Online](https://www.g2.com/products/nmap-online/reviews) - [OpenCTI by Filigran](https://www.g2.com/products/opencti-by-filigran/reviews) - [Palo Alto Cortex XSIAM](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews) - [Palo Alto Networks Cortex XSOAR](https://www.g2.com/products/palo-alto-networks-cortex-xsoar/reviews) - [Polarity](https://www.g2.com/products/polarity/reviews) - [Snowflake Data Exchange](https://www.g2.com/products/snowflake-data-exchange/reviews) - [Splunk](https://www.g2.com/products/splunk-2025-01-30/reviews) - [Splunk Cloud Platform](https://www.g2.com/products/splunk-cloud-platform/reviews) - [Splunk Enterprise](https://www.g2.com/products/splunk-enterprise/reviews) - [Sumo Logic](https://www.g2.com/products/sumo-logic/reviews) - [Swimlane](https://www.g2.com/products/swimlane/reviews) - [Tenable Vulnerability Management](https://www.g2.com/products/tenable-vulnerability-management/reviews) - [ThreatQ](https://www.g2.com/products/threatq/reviews) - [Tines](https://www.g2.com/products/tines/reviews) - [Wazuh](https://www.g2.com/products/wazuh/reviews) ## Criminal IP Features **Additional Functionality** - Search/Filter - Risk Management - Generative AI - Alerts/Notifications - Compliance Management - Third-Party Integrations - Certificate Assessment - API - Incident Management - Automated Containment - Real-Time Data - Vulnerability Scanning - Monitoring - Policy Management - Asset Discovery - Penetration Testing - Runtime Container Security - Activity Dashboard - Security Auditing - Issue Tracking - Threat Intelligence - Patch Management - Endpoint Management - Collaboration Tools - Vulnerability Management - Goal Setting/Tracking - Vulnerability Assessment - Asset Tagging - Assessment Management - Access Controls/Permissions - AI Copilot - Vulnerability/Threat Prioritization - Vulnerability Protection - Risk Assessment - Reporting/Analytics - SQL Injections **Detection** - Payment Verification - Bot Mitigation - Real-Time Monitoring - Alerts **Identification** - Reseller Database - Monitoring - Violations - Social Media Monitoring - Mobile App Monitoring - Domain Monitoring - Marketplace Monitoring - Paid Search Monitoring **Functionality** - Monitoring - Deep Web - Monitoring - Dark Web - Analysis - Ticketing - Simple Search - Leak Source - Centralized Dashboard - Real-Time Alerts **Asset Management** - Asset Discovery - Shadow IT Detection - Change Management - Compliance Management **Orchestration** - Asset Management - Security Workflow Automation - Remediation Management **Analysis ** - ID Analytics - Intelligence Reporting - Incident Reports - Reporting/Analytics **Enforcement** - Communication - Plans - Track - Activity Dashboard **Monitoring** - Gap Analysis - Vulnerability Intelligence - Compliance Monitoring - Continuous Monitoring - Server Monitoring - Real-Time Monitoring **Additional Functionality** - Customizable Templates - Access Control - Alerts/Notifications - Keyword Tracking - Search/Filter - Case Management - Competitive Analysis - AI Copilot - Intellectual Property Protection - Data Import/Export - Document Storage - Collaboration Tools - Investigation Management - Prioritization - Metadata Management - Content Library - Third-Party Integrations - Brand Guidelines - Brand Tracking - Engagement Tracking - Change Management - Brand Management - Generative AI - Reporting/Analytics - Violation Tracking **Information** - Proactive Alerts - Intelligence Reports - Threat Intelligence - Real-time Alerts **Administration** - Fraud Markers - Transaction Scoring - Blacklisting **Risk Management** - Risk-Prioritization - Reconnaissance - At-Risk Analysis - Threat Intelligence **Personalization** - Security Validation - Event Analysis - Web-Application Security - Application Security **Generative AI** - AI Text Summarization **Agentic AI - Fraud Detection** - Cross-system Integration - Adaptive Learning - Decision Making **Additional Functionality** - Onboarding - Risk Management - Digital Signature - Workflow Management - Data Capture and Transfer - Consent Management - Customer Data Management - AI Copilot - Mobile Access - For Financial Institutions - Audit Trail - Video Conferencing - Behavior Tracking - API - Compliance Management - Blockchain Support - SDKs - Search/Filter - Geolocation - Generative AI - Multi-Language - Scheduling - Authentication - Case Management - Approval Process Control - Alerts/Notifications - Access Controls/Permissions - Lifecycle Management - Secure Data Storage - Address Validation - Biometrics - Document Management - Forms Management **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security **Generative AI** - AI Text Summarization - Generate Threat Detection Rules - Generate Threat Summaries - Generative AI **Additional Functionality** - Real-Time Reporting - Real-Time Analytics - Network Monitoring - API - Reporting/Analytics - Alerts/Notifications - Behavior Analytics - AI Copilot - Activity Dashboard - Profiling - Cloud Backup - Data Visualization - Activity Monitoring - Network Scanning - Event Logs - Monitoring - Server Monitoring - Vulnerability Scanning - Incident Reporting - Activity Tracking - Reporting & Statistics - Network Provisioning - Prioritization - Threat Response - Real-Time Data - IT Reporting ## Top Criminal IP Alternatives - [LastPass](https://www.g2.com/products/lastpass/reviews) - 4.5/5.0 (2,063 reviews) - [1Password](https://www.g2.com/products/1password/reviews) - 4.6/5.0 (1,791 reviews) - [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) - 4.9/5.0 (1,311 reviews)