Security — entry 026 of 30

SecurityTrails

Verified Jul 2026

SecurityTrails indexes current and historical DNS records, WHOIS data, and subdomains for attack-surface mapping and third-party risk assessment, drawing on years of passive DNS collection. The API returns that history alongside live subdomain enumeration and associated-domain lookups, with SDKs published for JS, Python, and Go. Recorded Future (itself acquired by Mastercard in 2025) bought SecurityTrails in a 2022 deal and now sells the API as part of its own attack-surface-intelligence line, with a free entry tier and paid plans scaling by monthly query volume.

dnswhoisattack-surfacedomain-intelligencethreat-intel
AuthenticationAPI KeySign up with the provider to obtain credentials.
HTTPSSupportedTraffic is encrypted in transit.
CORSDisabledBrowser calls need a server-side proxy.
PricingFreemiumA usable free tier exists, with paid plans for more volume.
FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score61out of 100
Authentication15/25API key required
Pricing17/20Freemium tier available
Docs0/20No docs or spec available
Formats9/15Single response format
Freshness20/20Verified within 6 months

Embed this badge

Scored 61 on greatapis.com
<a href="https://greatapis.com/api/securitytrails/"><img src="https://greatapis.com/badge/securitytrails.svg" alt="Scored 61 on greatapis.com"></a>

Auth quickstart

  1. Sign up with the provider to get an API key.
  2. Send it on every request as a headerAuthorization: <key>
  3. The exact header isn't documented — Authorization is a common default; confirm in the provider's docs.
Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.