I like Criminal IP TI for its ease of use and the rich information it provides for searches. The drill-down capability is excellent, allowing me to start from a domain search and then drill down to each associated asset for an in-depth view. The domain and asset search is straightforward, with optional filters that save time and money. Having all results in one single view increases productivity. I also appreciate that the initial setup was very easy, just requiring account creation and login. Additionally, I find the results better and pricing more favorable compared to Shodan.io. Review collected by and hosted on G2.com.

Sometimes the time it takes to do a full scan on demand is too long and fails. Also, creating a PDF report of all vulnerabilities for all assets is difficult. Review collected by and hosted on G2.com.

The best part for me is the convenience. Instead of gathering information from several different sources, Criminal IP gives me a broad view of an IP or domain in seconds. It's fast, intuitive, and helps streamline security investigations. Review collected by and hosted on G2.com.

I don't have any major complaints, but I think the user onboarding experience could be improved a bit. Since the platform provides a wide range of security data, a few more guided explanations for beginners would be helpful. Review collected by and hosted on G2.com.

Criminal IP is a security analysis tool designed to help professionals detect and investigate online threats, often used in the context of threat intelligence. Review collected by and hosted on G2.com.

it must be used ethically and in compliance with the applicable laws. Review collected by and hosted on G2.com.

I mainly use Criminal IP TI as a preemptive defense tool to keep track of our global assets and verify the reputation of IPs accessing our services. I appreciate the 'asset search' feature because it's like a search engine for all our internet-facing assets, making it faster than running manual scans. I can see exactly what ports are open and what banners are being exposed in just a few clicks. The ability to pull real-time threat intelligence directly into our code is a game-changer, making it easy to automate the blocking of suspicious IPs based on their risk score. The API is clean and straightforward to set up, which allowed us to pull live threat data within the first hour of setting it up. Review collected by and hosted on G2.com.

If I had to pick something, I'd say the sheer volume of data can be a bit overwhelming sometimes. Since Criminal IP picks up everything, it occasionally flags IPs that are just harmless scanners or benign bots, which creates a bit of 'alert fatigue' for us. I wish there were more fine-tuned pre-filtering options to automatically weed out the 'noisy' but harmless data. Also the dashboard customization could be a bit more flexible. As a developer, I love building my own views, so having a more 'drag-and-drop' style dashboard to monitor our specific assets would be a huge plus. Review collected by and hosted on G2.com.

The feature I use most is the search for IP addresses and domains. I like that I can quickly see exposed services, open ports, SSL certificate information, reputation data, and known vulnerabilities without having to switch between multiple websites.

Before using Criminal IP, I usually had several browser tabs open to collect this information. Now I can review everything from one interface, which makes investigations much faster. The layout is clean, the searches are responsive, and the threat intelligence helps me decide which findings deserve a closer look. I also like the AI-powered insights because they provide additional context that would otherwise take longer to gather manually. Review collected by and hosted on G2.com.

The biggest challenge is the learning curve. Since the platform includes many search filters and investigation features, it takes some time to understand how to get the most out of everything it offers.

I think the experience would improve with more interactive onboarding, real-world investigation examples, and guided walkthroughs for new users. I would also welcome more native integrations with SIEM and SOAR platforms so investigation results can be shared more easily with the rest of the security workflow. Review collected by and hosted on G2.com.

One of the things I appreciate most about Criminal IP TI is how much context it provides for an IP address. When investigating alerts from firewalls, IDS, or SIEM systems, I often need to quickly determine whether an IP is suspicious or simply part of normal internet traffic, significantly reducing the time spent manually searching across multiple OSINT sources.

It's useful for daily security investigations: from an IT operations perspective, having quick access to threat intelligence speeds up incident triage. If a monitoring system flags an external connection, I can quickly search the IP in Criminal IP TI and immediately see whether it has been associated with malicious activity or suspicious infrastructure.

Implementation is fairly easy because the platform is web-based and provides an API. IT teams can start using the platform immediately through the web interface, and integration with monitoring tools can be done later through the API. It has strong API and automation options. Review collected by and hosted on G2.com.

While the platform is powerful, the amount of data available can initially feel overwhelming. New users may need some time to understand all the data points, filters, and risk indicators presented in the interface.

For smaller organizations or IT/Software Dev departments with limited budgets, access to full threat intelligence features and large API quotas could potentially be expensive. Review collected by and hosted on G2.com.

I love how Criminal IP TI brings multiple layers of threat intelligence into a single, easy-to-use platform. The real-time IP reputation and risk scoring are especially useful, as they quickly highlight suspicious or malicious infrastructure. I also appreciate the detailed visibility into open ports and services, which makes reconnaissance much faster. The OSINT aggregation saves a lot of time by eliminating the need to switch between tools. The speed, accuracy, and all-in-one approach make it a very efficient solution for security research and penetration testing. The initial setup was quite straightforward and user-friendly, and I liked that you can begin with the web interface for quick access and gradually integrate it into workflows. Review collected by and hosted on G2.com.

One area that could be improved is the depth of contextual insights for some IPs, as occasionally the data feels a bit limited for deeper analysis. The interface, while functional, could be more intuitive and streamlined for faster navigation during active testing. It would also be helpful to have more advanced filtering and customization options when working with large datasets. Additionally, clearer explanations of certain risk scores or flags would make it easier to interpret results. Review collected by and hosted on G2.com.

I really appreciate how the UI/UX of Criminal IP TI is on point, making it a great experience to work with. The data collected by Criminal IP TI is really precise and it provides the technicals we need to enrich the data we already have. The initial setup was really easy, which made getting started a breeze. Review collected by and hosted on G2.com.

In the search engine there are hacking groups. The list of hacking groups is not that precise since some of them are just tools used by threat actors. Review collected by and hosted on G2.com.

The platform does an incredible job of turning complex security data into a digestible format that’s easy to navigate even for a designer. It packs a massive toolkit without feeling cluttered, and our devs were impressed by how the well-structured API allowed for a quick, painless setup within our system. This seamless connectivity has made it much simpler for us to visualize and act on threat data in real-time. Review collected by and hosted on G2.com.

With so much data available, there’s a bit of a learning curve when you first try to master the advanced search filters. While I check the dashboard daily, I’ve noticed the web interface can occasionally lag slightly behind the live data we receive through our backend. It’s a minor friction point, but adding more intuitive onboarding for non-security specialists would definitely help bridge the gap. Review collected by and hosted on G2.com.

I use Criminal IP TI for checking all unauthorized IPs in our company. It keeps our company safe, compliant, and on-record. I really like the UX, which is something that most security apps don't get right. The user experience is crucial, especially in highlighting the issues and actions I need to take. The initial setup was very easy and straightforward. Review collected by and hosted on G2.com.

Nothing. I believe the app offers everything I need. Review collected by and hosted on G2.com.