“Decoding Political Violence with OSINT and Lessons from the Frontline”

Join deep dive: Wed, Dec 18, 16:00 CET
04 Dec 2019

Free-Tier Data in the Transform Hub

Maltego Team

Update on August 19th, 2020: We at Maltego have been working to extend the number of data sources offering free access or free trials. To explore more Transform Hub items and data partners that offer such options, please visit our Transform Hub, where you can view all free-tier data integrations under the related filter.

Maltego free tier data sources in the Transform Hub



One of the reasons why many investigators enjoy working with Maltego is the ability to easily connect data and functionalities from diverse sources. As a Maltego user, one can browse, discover and access all sorts of integrations via the Transform Hub.

We are excited to announce that select data partners like Farsight and Dataprovider.com are offering free-tier access on the Transform Hub.

What does that mean for you? đź”—︎

In order to make it as easy as possible for you to test the data offered by our partners for your investigations, you can now access a limited amount of Transforms for FarSight DNSDB for free and with no API key required, directly through Maltego. It is as easy as clicking “install” in the Transform Hub and you can immediately start running the Transforms. The Maltego output window will tell you once you have exceeded your free quota.

Free trial with Farsight đź”—︎

Let us look at a quick example. Farsight maintains a huge passive DNS historical database. Among other things, this data allows you to discover hidden subdomains on a particular domain, giving you a deeper glimpse into the potential attack surface of a target you’re investigating than a regular DNS / reverse-DNS lookup provides.

Here is what Maltego’s regular “DNS From Domain” Transforms (from the Maltego Standard Transforms) reveal about maltego.com:

![DNS from Domain Transform from Maltego Standard Transform](/images/uploads/farsight-image-1.png “\\\\“DNS from Domain\\\\” Transforms from Maltego Standard Transform”)

Running the same domain through FarSight’s passive DNSDB, here are the additional subdomains we are able to uncover:

DNS Domains from Farsight DNSDB Transforms

That is quite a bit of additional information, a lot of it certainly relevant if you were thinking about pentesting this domain.

In sum, there are now three options how Maltego users can access Farsight DNSDB:

1. Free-tier functionality đź”—︎

  • Instant access, no API key required
  • Limited queries (12 per hour)
  • Limited responses (12 per query for Maltego CE, 50 for Maltego One)

If you are a Maltego user but new to the Farsight DNSDB, all you need to do is install the Farsight DNSDB Transform set and immediately utilize the provided limited free queries without installing a Farsight DNSDB API Key.

2. 30-day trial đź”—︎

  • (Free) API key required
  • 100 queries per day for 30 days
  • No response limit

To test the use of Farsight beyond the free integrations, you can get a DNSDB Trial API Key to utilize DNSDB for 30 days with 100 queries available per day by registering here.

3. Use the Farsight API key to unleash full functionality đź”—︎

  • API key required
  • No rate limits, no response limits

Using Maltego with Farsight DNSDB Transforms đź”—︎

If you are already both a Maltego user and Farsight DNSDB customer (or 30-day trial user), simply install the Farsight DNSDB Transform set.

To learn more, check out the user guide here.

Are you a data provider? đź”—︎

If you would like to reach new potential audiences by leveraging the large global Maltego user base, join our partnership program and make your data easily accessible to investigators worldwide. Click here:



If you have any questions regarding the free-tier functionality or the Transform Hub, please reach out on Twitter @MaltegoHQ.

By clicking on "Subscribe", you agree to the processing of the data you entered and you allow us to contact you for the purpose selected in the form. For further information, see our Data Privacy Policy.