API Available
Tools that offer a documented API for programmatic access to their data.
ANY.RUN
Interactive online malware sandbox that runs suspicious files and URLs and records their behaviour.
AbuseIPDB
Community-maintained database of reported malicious IP addresses, with reputation lookups and a free API tier.
BuiltWith
Technology profiler that reports the frameworks, analytics, hosting and other services a website is built with.
Censys
Search engine for internet-facing hosts, certs, and services.
Companies House
UK government register for searching company filings, officers and persons with significant control.
Criminal IP
Search engine and threat-intelligence platform for internet-exposed assets, IP reputation and domain scans.
DomainTools
Domain intelligence platform with WHOIS history, reverse WHOIS and DNS pivoting for investigating who is behind a domain.
FOFA
Cyberspace search engine that indexes internet-exposed hosts, services and web fingerprints for querying.
FlightAware
Live and historical flight tracking with aircraft, airport and tail-number lookups; deeper history on paid plans.
Have I Been Pwned
Checks emails/accounts against known breaches.
Hunter.io
Finds and verifies professional email addresses associated with a domain.
IPinfo
IP address data service returning geolocation, ASN, company and privacy-detection details for any IP.
NASA FIRMS
NASA's Fire Information for Resource Management System, mapping near-real-time satellite fire and thermal-anomaly detections.
SecurityTrails
Historical DNS, WHOIS and subdomain data for domains and IP addresses.
Shodan
Search engine for internet-connected devices, servers, and IoT.
VirusTotal
Scans files and URLs against many engines and aggregates threat intel.