SecurityTrails review

SecurityTrails is a cyber threat intelligence data service for domain, DNS, and IP information. Its APIs let applications query current and historical data, with use cases including asset discovery and cyber investigations. Rather than serving as a general-purpose security search engine, it focuses on infrastructure records that teams can use to map domains, DNS activity, and related IP data.

The published product information lists historical DNS and WHOIS lookup data, domain and IP queries, and associated-domain information. Those capabilities can support finding forgotten assets, tracking infrastructure changes, and investigating possible brand attacks or digital fraud. Security teams can also use the data in cyber forensics workflows.

The practical fit depends on whether your work needs this kind of infrastructure intelligence and whether you can put the API data to use. SecurityTrails is aimed at teams and researchers looking for domain, DNS, and IP context—not a broad suite of security tools.

The useful distinction is its focus on historical and related infrastructure data. Current DNS records show a point in time; historical DNS and WHOIS records can help teams investigate what changed or connect a target to other domains and IPs. The product information also lists asset discovery as a use case, which makes the data relevant when an organization needs to find infrastructure it may not have documented.

There is a practical example in a Reddit thread about DNS record recovery. A user described SecurityTrails’ DNS changelog as a way to see changes to A, AAAA, MX, NS, SOA, and TXT records. Commenters said that history helped when onboarding a client whose records were poorly documented, or when a vendor changed DNS without notice. That is anecdotal, but it shows where historical records can be more than an investigation feature: they can help reconstruct infrastructure history.

Associated-domain data and API access also suit workflows that need to query infrastructure programmatically. The published product information names cyber forensics, brand attack prevention, and digital fraud investigations as potential uses; it does not establish that SecurityTrails replaces the other tools those workflows may require.

Cost is the clearest constraint. The published pricing information, checked November 7, 2026, lists Professional at $500 per month for 20,000 queries and Business at $1,500 per month for 65,000 queries. That puts the listed entry point at $500 monthly, with no free plan. The data marks pricing confidence as medium, so confirm current rates and terms before budgeting.

Enterprise includes flexible queries, but its price is not published. The OSINT Toolkit lists 2,500 queries per month and is restricted to non-commercial security research; its price is also not published. Annual rates are not published, and trial availability is not specified. Those gaps make it hard to compare the full cost of scaling or establish whether a pilot is available.

The published information does not publish API rate limits or query overage terms, so we cannot say how usage beyond a plan cap is handled. Teams should clarify those terms before building a production workflow around the API. SecurityTrails is useful infrastructure intelligence, but the listed prices make it a purchase for teams with a clear need and budget.

The available pricing details list Professional at $500 per month for 20,000 queries and Business at $1,500 per month for 65,000 queries. Moving up costs three times as much and adds 45,000 monthly queries. Whether that extra volume is worth the jump depends on your workload; the listed tiers do not show a cheaper paid option for lower usage.

Enterprise has flexible query volume, but its price is not published. The OSINT Toolkit lists 2,500 queries per month, but its price is also not published and use is restricted to non-commercial security research. It is not a free commercial plan. Annual rates are unpublished, and the available details do not specify a free trial. No add-ons are listed. Treat the monthly figures as the only published price points here, and confirm current terms with SecurityTrails before budgeting.

Switching effort depends on how your tools use the API. Before moving, inventory the queries and fields your workflows rely on, including historical DNS and WHOIS, domain and IP data, and associated-domain lookups. The published information does not document export tools, API compatibility with alternatives, or a migration process, so we can’t put a reliable time estimate on the work. Ask about exporting results and preserving access to historical records before you commit.

The clearest listed reason to leave may be cost: Professional starts at $500 monthly, and Business is $1,500. But the published published material contains no Reddit posts, so we can’t responsibly say what users there report as their reasons for leaving. Check recent user discussions and compare the replacement’s data coverage, query limits, and price against your actual workflows; don’t assume another provider has equivalent historical data.