P
Cloud Security
Palo Alto Networks Cortex XDR
AI-assisted XDR platform that correlates endpoint, network, cloud, identity, and email data for threat prevention, detection, investigation, and response.
Contact salesTechZella Directory
Software for Threat hunting in 2026
List of Threat hunting Software | Last updated: October 8, 2026
Quick comparison
Threat hunting Software
| # | Software / Tool | Best For | TechZella Score | User Rating | Pricing |
|---|---|---|---|---|---|
| 1 | Rapid7 InsightIDR | Rapid7 InsightIDR is a cloud SIEM for threat detection, investigation, log analysis,… | 8.3/10 | — | Contact sales / $0 |
| 2 | Cisco Secure Endpoint | Cisco Secure Endpoint provides cloud-managed endpoint protection, detection, threat hunting, and response… | 8.1/10 | — | Contact Cisco |
| 3 | Carbon Black | Carbon Black is Broadcom’s endpoint security portfolio for threat prevention, behavioral detection,… | 7.9/10 | — | Contact sales |
| 4 | WhoisXML API | A hosted REST API that returns domain, IP address, and email WHOIS… | 7.8/10 | — | $0 / $30 |
| 5 | DomainTools Iris | DomainTools Iris is a domain-intelligence platform for investigating internet infrastructure, assessing domain… | 7.0/10 | — | Contact vendor |
| 6 | ARIN Whois RWS | ARIN Whois-RWS is a public REST API and web interface for querying… | 6.8/10 | — | See pricing |
| 7 | CentralOps DomainDossier | CentralOps Domain Dossier is a browser-based domain and IP investigation tool that… | 6.8/10 | — | Free / $20 |
| 8 | DNSDumpster | DNSDumpster is a web-based reconnaissance service for finding domain-related hosts, DNS records,… | 6.7/10 | — | $0 / $49 |
| 9 | SecurityTrails | SecurityTrails provides domain, DNS, WHOIS, and IP intelligence through a web platform… | 6.6/10 | — | See pricing |
| 10 | Spyse | Spyse was an internet-asset search service for cybersecurity research, exposing data about… | 5.3/10 | — | See pricing |
Filters
Editorial selection
Software for Threat hunting in 2026
S
Antivirus Software
Sophos Intercept X
Endpoint security software that combines AI malware prevention, exploit mitigation, ransomware rollback and centralized management through Sophos Central.
Custom quote / Quote-based subscription
S
Cloud Security
SentinelOne Singularity
Unified AI-driven security platform covering endpoint, cloud, identity, AI, security operations and third-party telemetry.
$179.99 / year per endpoint
C
Cloud Security
CrowdStrike Falcon
CrowdStrike Falcon is a cloud-based cybersecurity platform for endpoint, identity, cloud, data and security operations protection.
$7.99 / per device/month
M
Antivirus Software
Microsoft Defender
Microsoft Defender is a security product family covering endpoint, identity, email, cloud applications, and XDR workloads.
$3.00 / user/month, paid yearly