{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "securitytrails", "name": "SecurityTrails", "vendor": "SecurityTrails (Recorded Future)", "vendorUrl": "https://securitytrails.com", "kind": "http-api", "category": "security-intelligence", "summary": "SecurityTrails is a Recorded Future company with a read-only REST API for current and historical DNS records, WHOIS, subdomains, SSL data and IP lookups, used by security teams for domain and attack surface investigation.", "url": "https://www.anchorterminal.com/tools/securitytrails", "markdownUrl": "https://www.anchorterminal.com/tools/securitytrails.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/securitytrails.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/securitytrails.json", "dns": "securitytrails.grade.anchorterminal.com", "transports": [ "http" ], "remoteUrl": "https://api.securitytrails.com/v1/", "packages": [], "auth": "api-key", "authNotes": "One API key per account, sent as an `APIKEY` header or as `apikey` in the query string, both documented. The reference pages show the key as a query parameter on every v1 endpoint, and the ASI Project API takes it in an `apikey` header. No scopes were found. How a key is issued, revoked or rotated couldn't be read, because securitytrails.com answered every page with a Cloudflare challenge on 3 November 2026.", "pricing": "paid", "pricingNotes": "No price could be read. securitytrails.com/app/pricing and /corp/pricing answered a Cloudflare challenge on 3 November 2026, and the docs name no plan, quota or price. `GET /v1/account/usage` returns `current_monthly_usage` and `allowed_monthly_usage`, so access is metered by a monthly query allowance. Whether a free plan exists and whether a card is needed is unverified.", "priceSummary": "Paid", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API overview, the reference pages or llms.txt (checked 2026-11-03). Pricing pages were unreadable.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://docs.securitytrails.com/docs/overview", "llmsTxt": "https://docs.securitytrails.com/llms.txt", "capabilities": [ "secintel.dns", "secintel.exposure", "secintel.ip-enrichment" ], "tags": [ "hosted", "api-key", "llms-txt", "read-only", "dns", "whois", "enterprise" ], "lastRelease": "2020-05-28", "graded": true, "anchor": { "graded": true, "score": 30.7, "grade": "F", "agentReady": false, "rank": 1270, "ranked": true, "rankOf": 1349, "categoryRank": 9, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 56, "maintenance": 5, "payments": 0, "reliability": 20, "schema": 54, "security": 32, "transparency": 32 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 20, "points": 4, "reason": "Read with the hosted lines. status.securitytrails.com redirects to securitytrails.statuspage.io, which says it is inactive and visible to team members only, so no public status page (0) and no readable history (5). No rate limit numbers in the readable docs; the pricing page, which may carry them, answered a Cloudflare challenge (0). 429 is documented on the ping page with the message 'API rate limit exceeded' and no Retry-After or backoff guidance, and every v1 call is a read (5 of 15). No SLA found (0). The v1 API is live and not marked beta, though every operation id carries an '-old' suffix with deprecated set to false (10). 0 + 5 + 0 + 5 + 0 + 10 = 20.", "checked": "2026-11-03" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 54, "points": 8.78, "reason": "The reference pages are generated from an OpenAPI document (operation ids, deprecated flags and typed schemas show on each page), but no spec is published for download and docs.securitytrails.com/openapi redirects to 404 (12 of 25). llms.txt with a Markdown twin of every page (10). Each endpoint has a one-line purpose and nothing on when to use it or not (8 of 20). Path and query parameters are typed, the DNS history type is an enum of six values, and the ASI API has enums, operators and a 1 to 1,000 limit, but the v1 filter object is untyped strings and the DSL query is a free string whose grammar isn't documented (8 of 15). Example responses on every page, with errors mostly limited to 400 and a message, 401 and 429 only on the ping page and 422 on the ASI API (8 of 15). Versioned paths (/v1, /v2) and a changelog whose dated entries stop on 28 May 2020, with one undated Project API 1.7.0 entry (8 of 15). 12 + 10 + 8 + 8 + 8 + 8 = 54.", "checked": "2026-11-03" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 56, "points": 9.1, "reason": "`include_ips` on the list endpoints and an `enrichments` list on ASI asset search, which returns only custom tags by default, size responses on part of the surface; v1 lookups return fixed shapes (12 of 25). `page` with `pages` and `max_page` on v1 lists, scroll on the DSL endpoints, cursor pagination with `limit` up to 1,000 and filters with seven operators on the ASI API (16 of 20). Errors are a 400 message, 401 and 429 text strings and 422 detail arrays, with no codes to branch on (8 of 20). The overview says the v1 API is read-only, so retries are safe; the ASI tag endpoints write with no idempotency guidance (14 of 20). One required parameter per lookup besides the key. No official SDK found, and the npm `securitytrails` package from October 2021 has no repository or homepage (6 of 15). 12 + 16 + 8 + 14 + 6 = 56.", "checked": "2026-11-03" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 32, "points": 5.6, "reason": "One API key with no scopes found, accepted as an `APIKEY` header or as `apikey` in the query string, which the reference pages show on every v1 endpoint (20 less 10, so 10). Revocation and rotation couldn't be read. The v1 API is read-only by the overview's own statement; the ASI API writes tags with no approval step (14 of 20). DNS TXT values, WHOIS fields and user agent strings are third-party text, with no guidance on treating them as untrusted (5 of 15). /v1/account/usage reports monthly counts and nothing per call (3 of 15). security.txt on securitytrails.com and the security page are behind the Cloudflare challenge, api.securitytrails.com answers security.txt with 401, and no disclosure policy, bug bounty or certification was readable (0 of 20). 10 + 14 + 5 + 3 + 0 = 32.", "checked": "2026-11-03" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 0, "points": 0, "reason": "No x402, MPP or L402 (0). securitytrails.com/app/pricing and /corp/pricing answered a Cloudflare challenge, and the docs name no price, so no public price was read (0). Whether a free plan exists couldn't be confirmed; the usage endpoint shows only that each account has a monthly allowance (0). A key comes from a browser signup on securitytrails.com, with no programmatic route found (0). 0 + 0 + 0 + 0 = 0, scored as Contentful and Personio were on 7 October 2026 when their pricing pages were unreadable.", "checked": "2026-11-03" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 5, "points": 0.44, "reason": "The newest dated changelog entry is 28 May 2020, the Project API 1.7.0 entry is undated and the SurfaceBrowser changelog ends on 26 February 2019, so no change within 180 days was found (0 of 30). No entries in the last 90 days (0). A public changelog exists but is five years stale, and the support page is disallowed by robots.txt (3 of 25). No official SDK; the npm package of October 2021 names the vendor as author with no repository (0 of 15). The docs site serves llms.txt and Markdown twins, which shows the documentation platform is current (2 of 10). 0 + 0 + 3 + 0 + 2 = 5.", "checked": "2026-11-03" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 32, "points": 2.8, "note": "editorial 5, provenance 58", "reason": "A closed service whose terms couldn't be read because of the Cloudflare challenge (5 of 30, for a known commercial product with unread terms). The privacy policy was unread and no retention statement or DPA was found (0 of 30). No deprecation policy; the operation ids carry '-old' with deprecated set to false and no notice explains them (0 of 20). No subprocessor or data location statement readable (0 of 20). 5 + 0 + 0 + 0 = 5.", "checked": "2026-11-03" } ], "assessment": { "date": "2026-11-03", "basis": "public evidence", "confidence": "low", "notes": { "ergonomics": "`include_ips` on the list endpoints and an `enrichments` list on ASI asset search, which returns only custom tags by default, size responses on part of the surface; v1 lookups return fixed shapes (12 of 25). `page` with `pages` and `max_page` on v1 lists, scroll on the DSL endpoints, cursor pagination with `limit` up to 1,000 and filters with seven operators on the ASI API (16 of 20). Errors are a 400 message, 401 and 429 text strings and 422 detail arrays, with no codes to branch on (8 of 20). The overview says the v1 API is read-only, so retries are safe; the ASI tag endpoints write with no idempotency guidance (14 of 20). One required parameter per lookup besides the key. No official SDK found, and the npm `securitytrails` package from October 2021 has no repository or homepage (6 of 15). 12 + 16 + 8 + 14 + 6 = 56.", "maintenance": "The newest dated changelog entry is 28 May 2020, the Project API 1.7.0 entry is undated and the SurfaceBrowser changelog ends on 26 February 2019, so no change within 180 days was found (0 of 30). No entries in the last 90 days (0). A public changelog exists but is five years stale, and the support page is disallowed by robots.txt (3 of 25). No official SDK; the npm package of October 2021 names the vendor as author with no repository (0 of 15). The docs site serves llms.txt and Markdown twins, which shows the documentation platform is current (2 of 10). 0 + 0 + 3 + 0 + 2 = 5.", "payments": "No x402, MPP or L402 (0). securitytrails.com/app/pricing and /corp/pricing answered a Cloudflare challenge, and the docs name no price, so no public price was read (0). Whether a free plan exists couldn't be confirmed; the usage endpoint shows only that each account has a monthly allowance (0). A key comes from a browser signup on securitytrails.com, with no programmatic route found (0). 0 + 0 + 0 + 0 = 0, scored as Contentful and Personio were on 7 October 2026 when their pricing pages were unreadable.", "reliability": "Read with the hosted lines. status.securitytrails.com redirects to securitytrails.statuspage.io, which says it is inactive and visible to team members only, so no public status page (0) and no readable history (5). No rate limit numbers in the readable docs; the pricing page, which may carry them, answered a Cloudflare challenge (0). 429 is documented on the ping page with the message 'API rate limit exceeded' and no Retry-After or backoff guidance, and every v1 call is a read (5 of 15). No SLA found (0). The v1 API is live and not marked beta, though every operation id carries an '-old' suffix with deprecated set to false (10). 0 + 5 + 0 + 5 + 0 + 10 = 20.", "schema": "The reference pages are generated from an OpenAPI document (operation ids, deprecated flags and typed schemas show on each page), but no spec is published for download and docs.securitytrails.com/openapi redirects to 404 (12 of 25). llms.txt with a Markdown twin of every page (10). Each endpoint has a one-line purpose and nothing on when to use it or not (8 of 20). Path and query parameters are typed, the DNS history type is an enum of six values, and the ASI API has enums, operators and a 1 to 1,000 limit, but the v1 filter object is untyped strings and the DSL query is a free string whose grammar isn't documented (8 of 15). Example responses on every page, with errors mostly limited to 400 and a message, 401 and 429 only on the ping page and 422 on the ASI API (8 of 15). Versioned paths (/v1, /v2) and a changelog whose dated entries stop on 28 May 2020, with one undated Project API 1.7.0 entry (8 of 15). 12 + 10 + 8 + 8 + 8 + 8 = 54.", "security": "One API key with no scopes found, accepted as an `APIKEY` header or as `apikey` in the query string, which the reference pages show on every v1 endpoint (20 less 10, so 10). Revocation and rotation couldn't be read. The v1 API is read-only by the overview's own statement; the ASI API writes tags with no approval step (14 of 20). DNS TXT values, WHOIS fields and user agent strings are third-party text, with no guidance on treating them as untrusted (5 of 15). /v1/account/usage reports monthly counts and nothing per call (3 of 15). security.txt on securitytrails.com and the security page are behind the Cloudflare challenge, api.securitytrails.com answers security.txt with 401, and no disclosure policy, bug bounty or certification was readable (0 of 20). 10 + 14 + 5 + 3 + 0 = 32.", "transparency": "A closed service whose terms couldn't be read because of the Cloudflare challenge (5 of 30, for a known commercial product with unread terms). The privacy policy was unread and no retention statement or DPA was found (0 of 30). No deprecation policy; the operation ids carry '-old' with deprecated set to false and no notice explains them (0 of 20). No subprocessor or data location statement readable (0 of 20). 5 + 0 + 0 + 0 = 5." }, "sources": [ { "what": "API overview", "url": "https://docs.securitytrails.com/docs/overview", "seen": "2026-11-03" }, { "what": "llms.txt", "url": "https://docs.securitytrails.com/llms.txt", "seen": "2026-11-03" }, { "what": "ping endpoint (401 and 429 responses)", "url": "https://docs.securitytrails.com/reference/ping-old-1.md", "seen": "2026-11-03" }, { "what": "account usage endpoint", "url": "https://docs.securitytrails.com/reference/usage-old-1.md", "seen": "2026-11-03" }, { "what": "get domain endpoint", "url": "https://docs.securitytrails.com/reference/get-domain-old-1.md", "seen": "2026-11-03" }, { "what": "DNS history by record type", "url": "https://docs.securitytrails.com/reference/dns-history-by-record-type-old-1.md", "seen": "2026-11-03" }, { "what": "search domain (filter)", "url": "https://docs.securitytrails.com/reference/search-old-1.md", "seen": "2026-11-03" }, { "what": "search domain (DSL)", "url": "https://docs.securitytrails.com/reference/search-domain-dsl-2-1.md", "seen": "2026-11-03" }, { "what": "scroll endpoint", "url": "https://docs.securitytrails.com/reference/scroll-old-1.md", "seen": "2026-11-03" }, { "what": "ASI asset search", "url": "https://docs.securitytrails.com/reference/assets-search_assets-1.md", "seen": "2026-11-03" }, { "what": "changelog, Project API 1.7.0 (undated)", "url": "https://docs.securitytrails.com/changelog/project-api-170-update.md", "seen": "2026-11-03" }, { "what": "SurfaceBrowser changelog", "url": "https://docs.securitytrails.com/page/surfacebrowsertm-changelog.md", "seen": "2026-11-03" }, { "what": "status page (inactive, team only)", "url": "https://securitytrails.statuspage.io/history", "seen": "2026-11-03" }, { "what": "Recorded Future company timeline", "url": "https://www.recordedfuture.com/our-story", "seen": "2026-11-03" }, { "what": "Mastercard completes the Recorded Future acquisition", "url": "https://www.recordedfuture.com/newsroom/press-releases/mastercard-finalizes-acquisition-recorded-future", "seen": "2026-11-03" }, { "what": "Attack Surface Intelligence product page", "url": "https://www.recordedfuture.com/products/attack-surface-intelligence", "seen": "2026-11-03" }, { "what": "npm registry, securitytrails", "url": "https://registry.npmjs.org/securitytrails/latest", "seen": "2026-11-03" }, { "what": "RDAP record", "url": "https://rdap.verisign.com/com/v1/domain/securitytrails.com", "seen": "2026-11-03" }, { "what": "pricing page (Cloudflare challenge, 403)", "url": "https://securitytrails.com/app/pricing", "seen": "2026-11-03" } ], "openQuestions": [ "unchecked: pricing, plans, the free tier and rate limit numbers (securitytrails.com/app/pricing and /corp/pricing answered a Cloudflare challenge, HTTP 403 with a cf-mitigated header of challenge)", "unchecked: the terms of service, privacy policy, security page and /.well-known/security.txt on securitytrails.com, for the same reason, so provenance.terms and provenance.privacy are empty", "unchecked: how an API key is issued, revoked or rotated, and whether keys have scopes, since the account pages were unreadable", "unchecked: the legal entity name. Recorded Future's company timeline confirms the January 2022 acquisition and Mastercard's December 2024 acquisition of Recorded Future, but no page naming the SecurityTrails entity was read", "unchecked: Recorded Future's press release on the SecurityTrails acquisition; /press-releases/20220104 and the newsroom path both answered 404", "Whether the '-old' operation ids on every v1 endpoint signal a planned replacement; the pages mark them deprecated false and no notice was found", "firstReleased is 2018-11-18, the earliest dated entry in the SurfaceBrowser changelog; the domain was registered on 21 June 2017 and the API's first release date wasn't found", "Category is the audit's, security-intelligence. The product's core is DNS and WHOIS history for domain investigation, which fits secintel.dns first, with exposure and IP enrichment behind it" ] }, "negative": 0, "verdict": "The v1 API is read-only and reaches current and historical DNS, WHOIS, subdomain and SSL records, with llms.txt and a Markdown twin of every reference page. The key is accepted in the query string, the changelog stops in May 2020, the status page is private, and pricing, terms and privacy sat behind a Cloudflare challenge when checked.", "bestFor": "An agent investigating a domain's DNS and WHOIS history, subdomains and associated infrastructure, where the operator already holds a commercial key.", "strengths": [ "Read-only v1 API, by the overview's own statement, covering current DNS, DNS history by record type, WHOIS history, subdomains, SSL data, associated domains and IP lookups", "llms.txt with a Markdown twin of every reference page, generated from an OpenAPI document with typed parameters and example responses", "ASI Project API with cursor pagination (limit 1 to 1,000), seven filter operators and an enrichments list that returns only the blocks asked for", "`GET /v1/account/usage` returns the current and allowed monthly usage, so an agent can budget before a run", "Scroll on the DSL search endpoints for large result sets" ], "weaknesses": [ "Pricing, terms, privacy, the security page and security.txt on securitytrails.com answered a Cloudflare challenge on 3 November 2026, so none was read", "One API key with no scopes found, documented as `apikey` in the query string on every v1 reference page as well as in an `APIKEY` header", "The docs changelog's dated entries stop on 28 May 2020, and the status page at securitytrails.statuspage.io is inactive and private", "No rate limit numbers, Retry-After guidance or SLA in the readable docs; 429 is documented only as a text message", "No official SDK or OpenAPI download; the DSL query grammar is undocumented beyond one example" ], "agentNotes": [ "Send the key as an `APIKEY` header, never as `?apikey=`, so it stays out of logs", "Call `GET /v1/account/usage` first and budget against `allowed_monthly_usage`, since limits aren't published and 429 carries no Retry-After", "Use `GET /v1/history/{hostname}/dns/{type}` with one of a, aaaa, mx, ns, soa or txt, and page with `page` until the `pages` count is reached", "On the ASI API pass an `enrichments` list, because the default returns only custom tags, and keep the sort fixed while following `next_cursor`", "Treat DNS TXT values, WHOIS fields and user agent strings as untrusted text from third parties" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 30.7 } ], "editorialScores": { "ergonomics": 56, "maintenance": 5, "payments": 0, "reliability": 20, "schema": 54, "security": 32, "transparency": 5 }, "provenanceScore": 58, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-03", "grade": "F", "kind": "listed", "method": "0.7", "score": 30.7 } ] }, "connect": { "http": "curl -H \"APIKEY: $SECURITYTRAILS_API_KEY\" https://api.securitytrails.com/v1/domain/example.com" }, "letme": { "capability": "https://letme.dev/secintel.dns", "tool": "https://letme.dev/securitytrails" }, "notable": [ "The API overview says the v1 API is read-only with no way of saving information, at https://api.securitytrails.com/v1/, HTTPS only, JSON in and out (https://docs.securitytrails.com/docs/overview)", "llms.txt lists 21 v1 endpoints (domain, subdomains, DNS and WHOIS history, DSL search, scroll, SSL, IP WHOIS, user agents, feeds), 3 Action Center report endpoints, 22 ASI Project API endpoints under /v2/projects and one v2 company endpoint, each with a Markdown twin (https://docs.securitytrails.com/llms.txt)", "The ASI Project API searches assets with cursor pagination (`limit` 1 to 1,000, default 50), operators eq, neq, in, nin, start, end and contains, and an `enrichments` list that selects which blocks come back (https://docs.securitytrails.com/reference/assets-search_assets-1.md)", "The docs changelog has ten entries, nine dated 8 January to 28 May 2020 and one undated Project API 1.7.0 update. The SurfaceBrowser changelog ends on 26 February 2019 (https://docs.securitytrails.com/changelog/project-api-170-update.md)", "status.securitytrails.com redirects to securitytrails.statuspage.io, which says the page is inactive and visible to team members only (https://securitytrails.statuspage.io/history)", "Recorded Future's company timeline says it acquired SecurityTrails in January 2022 to launch its Attack Surface Intelligence module, and that Mastercard closed its acquisition of Recorded Future in December 2024 for $2.65 billion (https://www.recordedfuture.com/our-story)", "securitytrails.com answered every page, including pricing, terms, privacy and security.txt, with a Cloudflare challenge (HTTP 403, a cf-mitigated header of challenge) on 3 November 2026. docs.securitytrails.com and api.securitytrails.com answered normally" ], "area": "developer", "details": [ { "label": "Surface listed", "value": "The v1 REST API at api.securitytrails.com, read from docs.securitytrails.com (overview, llms.txt, reference pages and changelog), the status page and Recorded Future's company pages on 3 November 2026. No account was made and no keyed call was sent. The ASI Project API under /v2/projects is noted" }, { "label": "v1 endpoints", "value": "GET /v1/domain/{hostname}, /v1/domain/{hostname}/subdomains, /v1/domain/{hostname}/ssl, /v1/domain/{hostname}/whois, /v1/history/{hostname}/dns/{type} (a, aaaa, mx, ns, soa, txt), /v1/history/{hostname}/whois, /v1/domain/{hostname}/associated, /v1/ips/nearby/{ipaddress}, /v1/ips/{ip}/whois, /v1/ips/{ip}/useragents, /v1/account/usage and /v1/ping, plus POST /v1/domains/list (filter), /v1/domains/list-backup (DSL) and /v1/ips/list (DSL) with page and scroll" }, { "label": "ASI Project API", "value": "22 endpoints under /v2/projects/{project_id} for assets, exposures, tags, rules and signatures. Asset search is a POST with a filter object, cursor pagination (limit 1 to 1,000) and an enrichments list (dns_records, whois, ip_metadata, open_tcp_ports, open_udp_ports, web_technologies, certificates, exposures and others). Tag endpoints write" }, { "label": "Pagination", "value": "`page` on v1 list endpoints with `pages`, `meta.total_pages` and `meta.max_page` (100 in the DSL example) in responses; `scroll=true` on DSL endpoints then GET /v1/scroll/{scroll_id}; cursor pagination on the ASI API" }, { "label": "Errors", "value": "400 with a `message` on most v1 pages, 401 'Invalid API key' and 429 'API rate limit exceeded' on the ping page, 422 with a `detail` array on the ASI API. No Retry-After or limit numbers documented" }, { "label": "Rate limits", "value": "Not published in the readable docs. The 429 message on the ping page is the only mention, and /v1/account/usage reports the monthly allowance" }, { "label": "Status page", "value": "status.securitytrails.com redirects to securitytrails.statuspage.io, which is inactive and visible to team members only" }, { "label": "SDKs", "value": "No official SDK found. The npm package `securitytrails` 2.0.0 (28 October 2021) names SecurityTrails as author with no repository or homepage, and no SecurityTrails organisation exists on GitHub. Community wrappers exist in Python, Ruby, R and PHP" }, { "label": "Ownership", "value": "Acquired by Recorded Future in January 2022; Recorded Future was acquired by Mastercard in December 2024, per Recorded Future's company timeline" }, { "label": "Unread pages", "value": "Pricing, terms, privacy, the security page and security.txt on securitytrails.com, each behind a Cloudflare challenge on 3 November 2026" } ], "provenance": { "legalEntity": "SecurityTrails (Recorded Future)", "domain": "securitytrails.com", "domainRegistered": "2017-06-21", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://docs.securitytrails.com/changelog/project-api-170-update", "securityTxt": "unknown", "checked": "2026-11-03", "notes": [ "The legal entity name couldn't be read. Recorded Future's company timeline says Recorded Future acquired SecurityTrails in January 2022 and Mastercard acquired Recorded Future in December 2024.", "securitytrails.com answered every page with a Cloudflare challenge (HTTP 403, a cf-mitigated header of challenge) on 3 November 2026, so the terms, privacy policy, security page and /.well-known/security.txt are unread. The terms' clause on automated access, if any, is unknown.", "securitytrails.com/robots.txt disallows /support/ and some system paths; docs.securitytrails.com/robots.txt disallows /*/api-next, /edit/ and login paths. Nothing disallowed was fetched.", "status.securitytrails.com redirects to securitytrails.statuspage.io, which is inactive and visible to team members only, so no status page is counted.", "RDAP (Verisign) gives securitytrails.com a registration date of 21 June 2017.", "api.securitytrails.com answers /.well-known/security.txt with 401." ], "score": 58, "checks": [ { "check": "Legal entity named", "value": "SecurityTrails (Recorded Future)", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "securitytrails.com, registered 2017-06-21 (9 years)", "points": 11, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "api.securitytrails.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Privacy policy", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "could not be fetched", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "not researched yet", "points": 0, "max": 0, "state": "na" }, { "check": "Support route", "value": "help pages", "points": 5, "max": 5, "state": "ok" } ] }, "humans": { "slug": "securitytrails", "checked": "2026-11-03", "company": "SecurityTrails", "peopleNote": "No person could be sourced from a first-hand page on 3 November 2026. securitytrails.com, including any about or team page, answered every request with a Cloudflare challenge, and Recorded Future's press release on the SecurityTrails acquisition answered 404 at /press-releases/20220104 and at the newsroom path. Press reports name Chris Ueland as SecurityTrails' co-founder and CEO at the acquisition, but no first-hand page confirming that was read, so nobody is listed. SecurityTrails has been part of Recorded Future since January 2022, and Recorded Future has been part of Mastercard since December 2024, both per Recorded Future's company timeline, so no investors are listed for a subsidiary. Company accounts were not found on a readable first-hand page.", "companySocial": {}, "support": { "urls": [ "https://docs.securitytrails.com/docs/overview" ] }, "sources": [ "https://www.recordedfuture.com/our-story", "https://www.recordedfuture.com/newsroom/press-releases/mastercard-finalizes-acquisition-recorded-future", "https://docs.securitytrails.com/docs/overview", "https://securitytrails.com/" ], "ownership": { "status": "subsidiary", "parent": "Recorded Future", "acquiredBy": "Recorded Future", "acquiredDate": "2022-01", "checked": "2026-11-03", "sources": [ "https://www.recordedfuture.com/our-story", "https://www.recordedfuture.com/newsroom/press-releases/mastercard-finalizes-acquisition-recorded-future" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/securitytrails.json", "live": { "slug": "securitytrails", "probe": { "target": "https://api.securitytrails.com/v1/", "method": "get", "lastAt": "2026-11-04T19:35:08.189358905Z", "lastOk": true, "lastStatus": 401, "lastMs": 426, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 402, "p95ms24h": 480, "samples24h": 43, "samples30d": 43, "days": [ { "date": "2026-11-04", "probes": 43, "ok": 43 } ] }, "securityTxt": { "url": "https://securitytrails.com/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-11-04T15:53:17.620028402Z" }, "updatedAt": "2026-11-04T19:35:08.189358905Z" } } }