ServiceNow integrations¶
DomainTools provides integrations for ServiceNow to deliver threat intelligence, domain monitoring, and investigation capabilities directly within your IT Service Management (ITSM) platform.
Available integrations¶
Iris Investigate and Enrich¶
The DomainTools app for ServiceNow provides comprehensive domain intelligence and risk scoring capabilities. This integration combines Iris Investigate for deep threat investigation with Iris Enrich for high-volume enrichment of domain indicators.
Key features:
- Domain profile and infrastructure data
- Risk scoring and threat assessment
- Whois, DNS, and SSL certificate enrichment
- Guided pivots for infrastructure analysis
- High-volume domain enrichment
- Automated workflows and playbooks
- Integration with Security Incident Response
Best for: Organizations that need comprehensive domain investigation and enrichment capabilities within ServiceNow incidents and workflows.
Get started with Iris Investigate and Enrich →
Iris Detect¶
Iris Detect provides automated monitoring and enforcement for newly discovered domains. Built on the industry's fastest domain discovery engine, Detect captures and risk-scores new domains within minutes of registration.
Key features:
- Fast new domain discovery across all TLDs
- Automated risk scoring and enrichment
- Watchlist monitoring for domain changes
- Enforcement actions (block, escalate to Google Safe Browsing)
- Automated incident creation
- Integration with Security Incident Response
Best for: Brand protection teams, fraud prevention, and security teams that need to monitor and respond to newly registered domains matching specific keywords.
Get started with Iris Detect →
Farsight DNSDB¶
Farsight Security DNSDB is the world's largest DNS intelligence database, providing historical and real-time passive DNS data. This integration enables passive DNS lookups directly within ServiceNow.
Key features:
- Historical DNS infrastructure data
- Passive DNS lookups (RData and RRSet queries)
- Summarized DNS query results
- Integration with Security Incident Response workflows
- Access to 100+ billion DNS records since 2010
Best for: Security teams that need historical DNS data for threat investigation and infrastructure analysis.
Get started with Farsight DNSDB →
Prerequisites¶
All DomainTools integrations for ServiceNow require:
- ServiceNow console with Administrator account
- Active DomainTools API credentials (specific to each product)
- Required ServiceNow dependencies:
- Security Incident Response
- Security Integration Framework
- Security Support Common
- Security Support Orchestration
For detailed prerequisites and installation instructions, see the individual integration guides.
Need help?¶
For questions about DomainTools integrations with ServiceNow, contact DomainTools Enterprise Support.