Skip to content
ThreatSTOP for AWS Blog

Tools for incident responders.

FirstSTOP deploys in monitor-only mode in minutes, identifies compromised assets fast, and moves seamlessly into containment and recovery. It puts ThreatSTOP's intelligence and defenses straight into the hands of your incident-response analysts.

Built on ThreatSTOP's intelligence platform.

Research unlimited IPs and domains with one-click ease in Check IoC, backed by rich metadata and Passive DNS.

  • Rich metadata and Passive DNS
  • Optional API service
  • 100% cloud SaaS
  • Deploys in under an hour
  • Works with all major DNS servers, including Windows Server 2016 and Microsoft Azure
  • 30-day free trial, no credit card
INDICATOR IP OR DOMAIN CHECK IOC RESEARCH ONE CLICK RICH METADATA PASSIVE DNS THREAT CATEGORY
Research unlimited IPs and domains with one-click ease in Check IoC, enriched with rich metadata and Passive DNS.

Everything an analyst needs, in one place.

FirstSTOP puts ThreatSTOP's intelligence and defenses straight into the hands of your incident-response analysts.

01
Check IoC Subscription
Research unlimited IPs and domains with one-click ease.
02
Downloadable IP and DNS Defense
Preconfigured downloadable ISO versions of ThreatSTOP's IP and DNS Defense for hunt and asset identification.
03
MyDNS Roaming Defense
20 free licenses for ThreatSTOP's MyDNS Roaming Defense.
04
Defense agents
Defense agents that correlate network and endpoint incidents.
05
Block mode when you need it
Option to add a 30-day limited customer deployment in block mode at no charge.
06
Policy customization
Customize policy to fit your environment.
07
Logs and reporting
Full logs and reporting across the response.

Respond faster, from monitor to containment.

FirstSTOP gives your incident responders ThreatSTOP's intelligence, defenses, and Check IoC access in one toolset. Start with a 30-day free trial, no credit card.