S
Cybersecurity Software
Spyse
Spyse was an internet-asset search service for cybersecurity research, exposing data about domains, IP addresses, certificates, and related infrastructure. Current service availability…
TechZella Directory
Software for Threat hunting in 2026
List of Threat hunting Software | Last updated: October 8, 2026
Quick comparison
Threat hunting Software
| # | Software / Tool | Best For | TechZella Score | User Rating | Pricing |
|---|---|---|---|---|---|
| 1 | Rapid7 InsightIDR | Rapid7 InsightIDR is a cloud SIEM for threat detection, investigation, log analysis,… | 8.3/10 | — | Contact sales / $0 |
| 2 | Cisco Secure Endpoint | Cisco Secure Endpoint provides cloud-managed endpoint protection, detection, threat hunting, and response… | 8.1/10 | — | Contact Cisco |
| 3 | Carbon Black | Carbon Black is Broadcom’s endpoint security portfolio for threat prevention, behavioral detection,… | 7.9/10 | — | Contact sales |
| 4 | WhoisXML API | A hosted REST API that returns domain, IP address, and email WHOIS… | 7.8/10 | — | $0 / $30 |
| 5 | DomainTools Iris | DomainTools Iris is a domain-intelligence platform for investigating internet infrastructure, assessing domain… | 7.0/10 | — | Contact vendor |
| 6 | ARIN Whois RWS | ARIN Whois-RWS is a public REST API and web interface for querying… | 6.8/10 | — | See pricing |
| 7 | CentralOps DomainDossier | CentralOps Domain Dossier is a browser-based domain and IP investigation tool that… | 6.8/10 | — | Free / $20 |
| 8 | DNSDumpster | DNSDumpster is a web-based reconnaissance service for finding domain-related hosts, DNS records,… | 6.7/10 | — | $0 / $49 |
| 9 | SecurityTrails | SecurityTrails provides domain, DNS, WHOIS, and IP intelligence through a web platform… | 6.6/10 | — | See pricing |
| 10 | Spyse | Spyse was an internet-asset search service for cybersecurity research, exposing data about… | 5.3/10 | — | See pricing |
Filters
Editorial selection
Software for Threat hunting in 2026
Developer APIs
ARIN Whois RWS
ARIN Whois-RWS is a public REST API and web interface for querying ARIN registration records, including IP networks, ASNs, organizations, and contacts.
C
Cybersecurity Software
CentralOps DomainDossier
CentralOps Domain Dossier is a browser-based domain and IP investigation tool that combines public registration, DNS, network, route, and service-scan information.
Free / daily allowance
Cybersecurity Software
DNSDumpster
DNSDumpster is a web-based reconnaissance service for finding domain-related hosts, DNS records, network details, and service banners. It also offers API access…
$0 / month
S
Cybersecurity Software
SecurityTrails
SecurityTrails provides domain, DNS, WHOIS, and IP intelligence through a web platform and API. It supports external infrastructure research and security-data enrichment,…
Cybersecurity Software
DomainTools Iris
DomainTools Iris is a domain-intelligence platform for investigating internet infrastructure, assessing domain risk, and enriching security workflows through web tools, APIs, and…
Contact vendor
Developer APIs
WhoisXML API
A hosted REST API that returns domain, IP address, and email WHOIS registration data in structured formats. It is a data lookup…
$0 / one-time allowance
R
Extended Detection and Response
Rapid7 InsightIDR
Rapid7 InsightIDR is a cloud SIEM for threat detection, investigation, log analysis, endpoint visibility, and automated incident response.
Contact sales / Annual or custom term
C
Endpoint Detection and Response
Carbon Black
Carbon Black is Broadcom’s endpoint security portfolio for threat prevention, behavioral detection, incident response, application control and workload protection.
Contact sales / Custom contract
Antivirus Software
Cisco Secure Endpoint
Cisco Secure Endpoint provides cloud-managed endpoint protection, detection, threat hunting, and response for Windows, macOS, Linux, Android, and iOS devices.
Contact Cisco / Subscription