G2

Anna D.

Mid-Market (51-1000 emp.)

1/25/2020

"Improving our geo data with Threat Intelligence APIs"

5/5

What do you like best about Threat Intelligence API Platform?

Domain Infrastructure Analysis API and Domain Reputation API contribute nicely to our security and data enrichment protocols. With these APIs, we can check IP addresses for possible malicious associations before we add them to our database. Besides, Threat Intelligence Platform has an intuitive user interface to build rather comprehensive reports. That’s good as you don’t have to be a tech expert to operate it. Review collected by and hosted on G2.com.

What do you dislike about Threat Intelligence API Platform?

This might be standard for this kind of APIs, but it may take a few seconds to gather full reports from the Domain Reputation API. As such, the score retrieval process can be a bit slow. However, because it provides a comprehensive analysis, it is something we can live with. Review collected by and hosted on G2.com.

Recommendations to others considering Threat Intelligence API Platform:

If you don’t want to experience a slowdown in Domain Reputation API, you can use the fast input mode. You will have to deal with fewer parameters. But if you are trying to work on potentially malicious IP addresses and need access to comprehensive details, it is probably better to use the full input mode. Review collected by and hosted on G2.com.

What problems is Threat Intelligence API Platform solving and how is that benefiting you?

Our job as an IP geolocation service provider is to gather all relevant geolocation data points such as country, region, city, postal code, latitude and longitude, and time zone in real-time for as many IP addresses as possible.

We also aim to bring context regarding the domains and servers connected to IP addresses as a premium service and we started using the various Threat Intelligence APIs mentioned for that purpose. It’s always better to gather data from several sources for crosslinking, enrichment, as well as to verify accuracy.

Overall, Threat Intelligence Platform’s products have helped us make our data more valuable and insightful for our customers. It has also allowed us to take an angle on cybersecurity as some IP addresses are identified as malicious (i.e., due to record and server misconfigurations, inadequate SSL certificates, showing up on malware feeds, etc.) and therefore don’t bring much to the table for marketing ends and surely should be blocked. Review collected by and hosted on G2.com.