shouldiuse.io

VERDICT

Should I use SecurityTrails?

DNS/domain intelligence and attack surface mapping, now a Recorded Future company - securitytrails.com

Depends. Buy if you do security research, bug bounty, or attack surface mapping and will actually use the API weekly. Skip if you need simple one-off domain lookups or transparent published pricing.

Confidence

Medium. Based on 15 public sources; many review snippets were truncated, so user quotes could not be verified verbatim.

Ratings

  • Value for money
  • Ease of useNo usable evidence in sources
  • Feature depth
  • Support qualityNo usable evidence in sources
  • Security postureNo public security findings either way

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Enterprise / APIContact sales

Best for

  • Bug bounty hunters
  • OSINT researchers
  • Attack surface mapping teams
  • Threat intel API integrations

Not for

  • Casual users needing occasional domain lookups
  • Buyers wanting transparent published pricing
  • Small teams without engineering or API skills
  • One-time recon tasks — free tools may suffice

Gotchas - check before you buy

high

Enterprise pricing is negotiate-with-sales; no list prices anywhere

medium

Guess: free tier has strict API rate limits; real usage requires paid keys

medium

Vendr tracks negotiated contracts — pricing varies buyer to buyer

medium

Only 2 G2 reviews; demand customer references before signing

Pros and cons

Pros

  • Deep historical DNS and subdomain data for OSINT work
  • Cited by high-earning bug bounty hunters in Reddit AMAs
  • Free tier available for basic lookups
  • Full API covers domains, DNS history, and exposures
  • Backed by Recorded Future's $65M acquisition

Cons

  • Enterprise API pricing is quote-only; no published numbers
  • Only 2 public G2 reviews — very thin diligence base
  • Appears in Reddit threads about overpriced paid security tools
  • Redditors recommend free alternatives like dnsx instead
  • Owned by Recorded Future; sold and supported via its platform

Sources & method

Analyzed 9/26/2026 - 15 sources - No known vulnerabilities found in the sources reviewed.

official x4review x9news x2

Key stats

  • Value for money: 3/5

    Rating

  • $0

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money: 3/5. Free tier solid; paid tiers called overpriced on Reddit
  • Ease of use. No usable evidence in sources
  • Feature depth: 4/5. Deep historical DNS, subdomains, exposures, SurfaceBrowser
  • Support quality. No usable evidence in sources
  • Security posture. No public security findings either way
  • 5/5 G2 rating 2 reviews only — thin sample
  • Yes Free tier Basic DNS/domain lookups
  • 100,000+ Users Globally, per company LinkedIn
  • $65M Acquired Recorded Future, Jan 2022

Pricing

Free

$0

  • Basic domain/DNS lookups
  • Limited API use

Enterprise / API

Not disclosed

  • Quote-based API plans
  • Custom scope via sales call

Security

No known vulnerabilities found in the sources reviewed.

What users say

OSINT researchers and bug bounty hunters consistently recommend SecurityTrails, while some Reddit users point to free alternatives over the paid tiers.

Full analysis

Based on 15 public sources; many review snippets were truncated, so user quotes could not be verified verbatim.

Strong OSINT/DNS intel for security teams and bug hunters; quote-only enterprise pricing makes casual use a pass.

Methodology

Based on 15 public sources; many review snippets were truncated, so user quotes could not be verified verbatim.

Sources

  1. Recorded Future Acquires SecurityTrails in $65M Dealsecurityweek.com
    news
  2. Recorded Future acquires SecurityTrailstechcrunch.com
    news
  3. SecurityTrails Reviews on G2 (seller)g2.com
    review
  4. Which paid cybersecurity tools are ridiculously overpricedreddit.com
    review
  5. HackerOne $1M bounty AMA mentioning SecurityTrailsreddit.com
    review
  6. Top 5 OSINT Sources for Penetration Testing and Bug Bountiesintel471.com
    review
  7. SecurityTrails Enterprise API Pricingsecuritytrails.com
    official
  8. SecurityTrails V2 API — List Exposuresdocs.securitytrails.com
    official
  9. SecurityTrails, a Recorded Future Company — LinkedInlinkedin.com
    official
  10. Recorded Future Support — SecurityTrailssupport.recordedfuture.com
    official
  11. SecurityTrails Pricing & Plans — Vendrvendr.com
    review
  12. SecurityTrails Review — OSINT4ALLosint4all.com
    review
  13. isMalicious vs SecurityTrailsismalicious.com
    review
  14. DomainTools vs SecurityTrails — SourceForgesourceforge.net
    review
  15. WhoisJSON API Alternative Blogwhoisjson.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.