// for security teams
Turn email data into threat intelligence
Investigate phishing domains in seconds. Map the infrastructure behind suspicious emails. Verify sender authenticity before it reaches your team. Tomba gives security analysts the email intelligence layer they've been missing.
// teams at these companies use tomba
// 01 · workflow
The calls behind this workflow
Each step is one API call. The app, the browser extension and bulk jobs run the same endpoints, on the same credits.
- 01GET
/domain-searchThe email addresses at a company, with names, roles and the company profile1 search credit per 10 results - 02GET
/email-formatThe address patterns a company uses, with their share1 email count credit - 03GET
/email-sourcesThe public pages where an address was found, with first and last seen dates1 email sources credit - 04GET
/email-verifierWhether an address is deliverable: syntax, MX, SMTP, catch-all and greylisting checks1 verification credit
curl -G https://api.tomba.io/v1/domain-search \
--data-urlencode "domain=piedpiper.com" \
-H "X-Tomba-Key: $TOMBA_API_KEY" \
-H "X-Tomba-Secret: $TOMBA_SECRET_KEY"const params = new URLSearchParams({
domain: "piedpiper.com"
});
const res = await fetch(`https://api.tomba.io/v1/domain-search?${params}`, {
headers: {
"X-Tomba-Key": process.env.TOMBA_API_KEY,
"X-Tomba-Secret": process.env.TOMBA_SECRET_KEY
}
});
const { data } = await res.json();import os, requests
res = requests.get(
"https://api.tomba.io/v1/domain-search",
params={
"domain": "piedpiper.com",
},
headers={
"X-Tomba-Key": os.environ["TOMBA_API_KEY"],
"X-Tomba-Secret": os.environ["TOMBA_SECRET_KEY"],
},
)
data = res.json()["data"]// 02 · features
Email intelligence built for security
The same data sales teams use to find prospects, your security team uses to investigate threats. Different mission, same powerful platform.
Domain reconnaissance
Enter any domain and get every associated email pattern, employee email, and department structure. See what attackers see before they use it against you.
Real-time SMTP verification
Verify if a suspicious sender address actually exists. Catch spoofed addresses, disposable emails, and non-existent mailboxes instantly.
Similar domain detection
Discover domains with similar names or shared infrastructure. Identify typosquatting, lookalike domains, and related threat actor assets.
Person & company enrichment
Turn an email address into a full profile. Name, title, company, social links, and more. Know who is behind a suspicious email in seconds.
API-First architecture
RESTful API with 13 SDKs. Integrate into Splunk, Sentinel, Cortex XSOAR, or any custom security tooling. JSON responses, webhook support.
GDPR compliant
All data sourced from publicly available information. Full GDPR compliance. Data Processing Agreements available for enterprise security teams.
// 03 · tools
The tools this team uses
- Phishing investigationSearch any suspicious domain to reveal all associated email addresses and patterns.
- Domain infrastructure mappingDiscover related domains and shared infrastructure behind threat actors.
- Sender verificationVerify if an email address actually exists before engaging with it.
- IOC enrichmentEnrich email-based indicators of compromise with company and person data.
- Bulk threat analysisUpload lists of suspicious emails for mass verification and enrichment.
- API integrationBuild Tomba into your SIEM, SOAR, or custom threat intelligence pipeline.
// 04 · customers
What customers say
It's a great product. I have been searching for a tool for a long time that could help me to find the email addresses of the contacts of a company. I have tried a lot of products in the past, but this is the best one I have ever found.
Vineet DevaiahFounder & CEO, TeliportmeThe support chat is very responsive, even on weekends. We tested it thoroughly and are very satisfied definitely a good investment with strong value.
Nicolas MoissetDigital Marketing Consultant, Multimediatique.frI've tested over a dozen email finder tools, and Tomba.io stands out as the best. It consistently delivers accurate results and is incredibly easy to set up using the API key.
Andrei KholkinFounder, Superpage.ioWe use Tomba.io to find emails of the right people, helping us reach out and grow our network easily.
Olderico A.F. CavigliaCEO, Strategycapp