Skip to main content

Head-to-head comparison

isMalicious vs SecurityTrails

DNS and domain intelligence platform. Features, pricing and API limits side by side.

Run a free reportView pricingFree tier · no credit card

isMalicious leads on 9 of 12 compared capabilities

2 shared — full breakdown in the table below

Quick verdict

Choose SecurityTrails for DNS history and subdomain discovery. Choose isMalicious for malicious verdicts, multi-source reputation scoring, CVE data and blocklists for firewalls and SOAR.

isMalicious

Threat intelligence API with multi-source correlation, CVE data and ransomware leak-site tracking.

Best for: Automated threat intelligence at scale

SecurityTrails

SecurityTrails (now part of Recorded Future) provides historical DNS, subdomain discovery, WHOIS and domain intelligence, mainly for domain research and attack surface mapping.

Best for: DNS history research and subdomain enumeration

Feature comparison

FeatureisMaliciousSecurityTrails
Historical DNS / subdomain dataPartial
WHOIS lookup
IP reputation verdict
Domain reputationPartial
URL scanner
Multi-source threat correlation
Ransomware leak-site tracking
CVE intelligence (CVSS, EPSS, KEV)Partial
Streaming threat feed
STIX/TAXII export
Bulk API
Free tier available

Check this table against your own indicators.

Run a free report

SecurityTrails: strengths and limitations

Strengths
  • Historical DNS records
  • Subdomain discovery
  • WHOIS and domain history
  • Attack surface mapping
Limitations
  • No real-time IP/domain reputation verdicts
  • No URL malware scanning API
  • No ransomware group tracking
  • No dark web monitoring
  • Enterprise pricing after Recorded Future acquisition
  • Not tuned for SOC blocklist automation

Pricing

isMalicious

Free: website lookups with no monthly cap and 250 API calls a month. Pro from €99/month. Enterprise custom pricing.

View pricing →

SecurityTrails

Paid plans from ~$99/month, enterprise via Recorded Future

Frequently asked questions

Is isMalicious a SecurityTrails alternative?

For threat intelligence and reputation scoring, yes. SecurityTrails remains stronger for deep DNS history and passive subdomain enumeration. isMalicious is better when you need malicious verdicts and automated security integrations.

Does isMalicious include DNS history?

isMalicious provides DNS records, WHOIS, and domain age as part of threat reports. For extensive historical DNS timelines and subdomain discovery at SecurityTrails depth, SecurityTrails remains the specialist.

Which is better after the Recorded Future acquisition?

SecurityTrails is increasingly bundled into enterprise Recorded Future offerings. isMalicious offers self-serve access and transparent pricing for teams that need API-first threat intelligence without enterprise contracts.

Can I replace SecurityTrails with isMalicious in a SOC?

For alert enrichment and blocklist automation, yes. For passive DNS research workflows, many teams keep SecurityTrails for discovery and use isMalicious for verdicts and feeds.

Other comparisons

isMalicious vs VirusTotalisMalicious vs AbuseIPDBisMalicious vs GreyNoiseisMalicious vs ShodanisMalicious vs urlscan.ioisMalicious vs IPQualityScoreisMalicious vs AlienVault OTXisMalicious vs CensysisMalicious vs IPinfoisMalicious vs Criminal IPisMalicious vs PulsediveisMalicious vs Cisco TalosisMalicious vs URLhausisMalicious vs SpamhausisMalicious vs Hybrid AnalysisisMalicious vs ANY.RUNisMalicious vs Cloudflare Radar

Decide with your own data

Don't take our word over SecurityTrails's. Check something real.

Paste an IP, domain or URL: reputation, WHOIS, DNS, ransomware signals and an AI-generated assessment. Free, no signup.

  • 250 free API calls/month
  • No credit card required
  • API key in under 2 minutes
Get a free API keyView pricing
API docsBrowse all platform comparisons