DomainTools Monitors vs IBM X-Force Exchange
DomainTools Monitors
domaintools.comIBM X-Force Exchange
exchange.xforce.ibmcloud.comSide by side
| Figure | DomainTools Monitors | IBM X-Force Exchange |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| API | Yes | Yes |
| Plans published | 2 | 1 |
| Spec score · Threat Intelligence Platforms | 7.3 (#17) | 8.2 (#4) |
| API access | DomainTools documents Monitor APIs for brand, registrant, IP, and name server tracking. | Using the API requires purchasing a premium subscription through an IBM sales representative or the X-Force Threat Intelligence page. |
| Availability | The documentation says Monitors are available to Personal and Enterprise members and other DomainTools users with paid subscriptions. | IBM identifies X-Force Exchange as platform independent, and its documented GUI requirements include a workstation or mobile device with a supported browser and a direct internet connection. |
| Support | The documentation provides an enterprise support email address: [email protected]. | Customers with a commercial ATP feed or Commercial API license can open IBM Support tickets; other inquiries can be emailed to [email protected]. |
Plans
DomainTools Monitors
- Enterprise membershipPriced on request
- Individual membershipPriced on request
In their own words
DomainTools Monitors
DomainTools Monitors has no write-up on Specifiction yet; its figures are above.
IBM X-Force Exchange
IBM X-Force Exchange is a cloud-based threat intelligence platform for researching security threats, collecting intelligence, and collaborating with peers. Its reports provide context for IP addresses, URLs, malware hashes, web applications, signatures, and vulnerabilities. Logged-in users can search, comment, share research, and create public or private collections containing indicators, reports, and other research content. A QRadar plug-in looks up IP and URL information from events and lets users send data from searches, offenses, and rules to collections. The API documentation covers IP and URL category feeds, reports, vulnerability feeds, and TAXII feeds, with JSON and STIX/TAXII formats. However, API use requires a purchased premium subscription; freemium API keys no longer have API access. The free plan provides limited portal access, and guest users cannot use every website feature. The GUI requires a supported browser and a direct internet connection. IBM describes API Enterprise as suitable for security operations centers and managed security service providers.