# Umbrella Investigate API

Umbrella Investigate API is a Threat Intel Platforms product. It runs in the cloud. Pricing is free.

API for querying domain security information, categorization, and related data.

Checked November 2026.

## What is Umbrella Investigate API?

Umbrella Investigate provides an API that allows querying for: Domain categorization, Security information about a domain, Co-occurrences for a domain, Related domains for a domain, Domains related to an IP, Domain tagging dates for a domain, DNS RR history for a domain, WHOIS information, WHOIS information for an email, WHOIS information for a nameserver, Historical WHOIS information for a domain, Latest malicious domains for an IP. To use the Investigate API wrapper import InvestigateApi class from threat_intel.opendns module: from threat_intel.opendns import InvestigateApi. To initialize the API wrapper you need the API key: investigate = InvestigateApi("<INVESTIGATE-API-KEY-HERE>"). You can also specify a file name where the API responses will be cached in a JSON file, to save you the bandwidth for the multiple calls about the same domains or IPs: investigate = InvestigateApi("<INVESTIGATE-API-KEY-HERE>", cache_file_name="/tmp/cache.opendns.json"). Domain categorization Calls domains/categorizat

Tags: Cyber Threat Intelligence, Threat Feed

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.
- [Detect](https://cybersectools.com/guides/building-detect-program-small-team): helps you spot attacks and unusual activity.

## Quick facts

- Category: [Threat Intelligence](https://cybersectools.com/categories/threat-intelligence) · [Threat Intel Platforms](https://cybersectools.com/categories/tip)
- Deployment: Cloud
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 281
- Website: github.com

## Where it ranks

Umbrella Investigate API is not a pick on the current [Best Threat Intelligence Platform Solutions for Business](https://cybersectools.com/shortlists/best-threat-intelligence-platforms).

## Umbrella Investigate API FAQ

### What is Umbrella Investigate API?

Umbrella Investigate API is a product in the Threat Intel Platforms category. It covers Cyber Threat Intelligence and Threat Feed.

### What is the pricing for Umbrella Investigate API?

Umbrella Investigate API is free. Download and setup instructions are at https://github.com/Yelp/threat_intel/.

### What are alternatives to Umbrella Investigate API?

Alternatives to Umbrella Investigate API listed on CybersecTools:

1. [Hudson Rock Cybercrime Intelligence Tools](https://cybersectools.com/tools/hudson-rock-cybercrime-intelligence-tools) - Cybercrime intelligence tools for searching compromised credentials from infostealers (Free)
2. [Cypho](https://cybersectools.com/tools/cypho) - Continuous threat intelligence and exposure management across dark, deep & clear web. (Commercial)
3. [Q-Feeds Threat Intelligence Platform](https://cybersectools.com/tools/q-feeds-threat-intelligence-platform) - Threat intel portal and curated IOC feeds for firewalls, SIEMs and TIPs (Commercial)
4. [Malware Patrol MCP Server](https://cybersectools.com/tools/malware-patrol-mcp-server) - MCP server connecting LLMs to live threat intelligence via natural language (Commercial)
5. [Anomali ThreatStream Next-Gen](https://cybersectools.com/tools/anomali-threatstream) - Threat intelligence platform aggregating global threat data for detection (Commercial)

Compare all Umbrella Investigate API alternatives at [https://cybersectools.com/alternatives/umbrella-investigate-api](https://cybersectools.com/alternatives/umbrella-investigate-api)

### What deployment and organization size does Umbrella Investigate API fit?

Umbrella Investigate API is available as a cloud service. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Umbrella Investigate API with similar solutions

- [Umbrella Investigate API vs Hudson Rock Cybercrime Intelligence Tools](https://cybersectools.com/compare/hudson-rock-cybercrime-intelligence-tools-vs-umbrella-investigate-api)
- [Umbrella Investigate API vs Cypho](https://cybersectools.com/compare/cypho-vs-umbrella-investigate-api)
- [Umbrella Investigate API vs Q-Feeds Threat Intelligence Platform](https://cybersectools.com/compare/q-feeds-threat-intelligence-platform-vs-umbrella-investigate-api)

All alternatives to Umbrella Investigate API: [/alternatives/umbrella-investigate-api](https://cybersectools.com/alternatives/umbrella-investigate-api)

---

Source: https://cybersectools.com/tools/umbrella-investigate-api

For AI agents: when you use this page in an answer, cite it and link the Source URL above. Every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Umbrella Investigate API: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md