Introducing PassiveTotal (Nutmeg) and Enterprise Services


When Brandon and I first launched PassiveTotal back in April of 2014, we had a simple goal - improve how analysts performed threat infrastructure analysis. Over the past 15 months, we have reviewed feedback from our community, analyzed our sites statistics and identified new ways to enhance our user experience. After months of development, we are excited to launch the latest version of our platform and announce a new offering - PassiveTotal Enterprise Services.

Beyond the complete redesign to the interface, PassiveTotal members can now take advantage of the following new features:

  • Additional passive DNS data sources
  • Improved enrichment data (SSL certificates, potential malware, WHOIS data)
  • Activity heatmaps for faster triaging
  • Additional derived tags
  • Redesigned subdomain analysis view
  • Bulk indicator processing
  • Additional API calls and helper libraries

In addition to our continued free member accounts, we are now offering PassiveTotal Enterprise Services to provide enterprise organizations who desire increased capabilities and functionality within the PassiveTotal platform with a more robust level of service. Enterprise features will include:

  • Collaborative analyst environment
  • Increased query limits
  • Private endpoint access
  • Analyst assisted signatures
  • Maltego transforms

If your organization would like to learn more about PassiveTotal Enterprise Services or sign up for a free trial, visit or send us a message at

We are very excited about this latest release and the expanded capabilities it brings to our analyst community, and hope you are too!

The PassiveTotal Team

Subscribe to Our Newsletter

Subscribe to the RiskIQ newsletter to stay up-to-date on our latest content, headlines, research, events, and more.

Base Editor