Domain, DNS and WHOIS intelligence for threat investigation teams
DomainTools sells domain and DNS intelligence to security teams, and its stack shows where that data lands: integrations with Splunk, CrowdStrike, Cortex XSOAR and Microsoft Sentinel point to a product built to plug into SOC workflows. Snowflake, Databricks and Spark behind Rust and Go services signal a data-heavy platform, while accelerating, manager-weighted hiring across sales and customer success suggests a push to expand and retain enterprise accounts.
DomainTools is a Seattle-based, privately held security company founded in 2004, with a team in the 51–200 employee range. It continuously collects domain, website and DNS data and turns it into risk scoring and investigative context for security practitioners. Core use cases include WHOIS history and reverse lookups, name server monitoring, brand protection, online fraud detection and cybercrime investigation. Customers are security operations and threat intelligence teams that consume the data through APIs and integrations with their SIEM and SOAR tools. Current hiring is concentrated in the United States.
DomainTools builds with React, TypeScript, PHP (Laravel, Symfony), Python, Rust and Go on AWS with Docker and Kubernetes, using PostgreSQL, CockroachDB, OpenSearch, Elasticsearch, Snowflake, Databricks and Apache Spark.
Its tech profile includes Splunk, Microsoft Sentinel, CrowdStrike, Cortex XSOAR and Palo Alto Cortex, consistent with delivering domain intelligence into security operations platforms.
Job posts point to API-first delivery and integrations, real-time threat feeds, IrisQL playbooks and MCP-based workflows, alongside scaling its data products.
Other companies in the same industry, closest in size
DomainTools's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.