Domain Infrastructure Analysis API and Domain Reputation API contribute nicely to our security and data enrichment protocols. With these APIs, we can check IP addresses for possible malicious associations before we add them to our database. Besides, Threat Intelligence Platform has an intuitive user interface to build rather comprehensive reports. That’s good as you don’t have to be a tech expert to operate it.

Our company deals with different publication partners regularly. It’s simply essential for us to know if they are trustworthy and will not expose our site to any security threats should we decide to work with them. For several weeks now, we have been overall satisfied with how several Threat Intelligence APIs helped us achieve our goal. As the point person for vetting third-party partners, I particularly like working with Domain Malware Check API and Connected Domains API. Domain Malware Check API makes it is easy for us to see if a third-party site hosts any malicious code or is part of a malware distribution network. We use Connected Domains API, meanwhile, to dig deeper into a particular domain or IP address. The tool uncovers if it has any subdomains connected to malicious domains. We also like that the service is easy to use. All you need to do is input the domain or IP address into the search field and get results within seconds. The results are easy to understand. But should you find that some are too technical, you can click the question mark icon beside a warning description for an explanation.

We make it a point to know everything there is to know about domains and so we’ve been using various features offered by Threat Intelligence Platform for some years now. We especially like using Domain Reputation Scoring API, Domain Malware Check API, and SSL Configuration Analysis API to know if there are potentially dangerous domains that we need to monitor. More precisely, we like that the platform allows us to type the domain name or IP address into the search field, and it automatically gives comprehensive information. A summary of the results for each API check appears in the header so we can immediately see which items (i.e., the ones marked with exclamation points) need our attention. For instance, when we enter a domain name or IP address, the platform warns us if it has ties to malicious domains or contains harmful content with the Domain Reputation Scoring API. It also lets us know if the domain is playing host to malware with the Domain Malware Check API. And finally, it tells us if it has Secure Sockets Layer (SSL) vulnerabilities and misconfigurations with the SSL Configuration Analysis API. These and other components tell us if a domain or an IP address is safe or unsafe to access. The platform allows our organization to take a proactive stance toward cyber defense by giving us actionable insights on domains that may negatively affect our network.