# What does FIRST — Forum of Incident Response and Security Teams use?

FIRST — Forum of Incident Response and Security Teams (first.org) shows public evidence of 18 tools, according to runsonwhat (last checked 2026-10-20).

- LinkedIn: https://www.linkedin.com/company/firstdotorg

## Edge & Hosting

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Fastly](https://www.runsonwhat.com/reverse/fastly) | CDN & Edge | DNS records, Website code |  |
| [NS1](https://www.runsonwhat.com/reverse/ns1) | DNS | DNS records |  |

## Application

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Anthropic](https://www.runsonwhat.com/reverse/anthropic) | AI | DNS verification records |  |

## Go-to-market

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Zoho](https://www.runsonwhat.com/reverse/zoho) | Sales & CRM | Custom domain |  |
| [Freshdesk](https://www.runsonwhat.com/reverse/freshdesk) | Support & Docs | Custom domain, Website code |  |

## Company Ops

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Google Workspace](https://www.runsonwhat.com/reverse/google-workspace) | Workspace | Email records |  |
| [reCAPTCHA](https://www.runsonwhat.com/reverse/recaptcha) | Security & Compliance | Website code |  |
| [Apple Business](https://www.runsonwhat.com/reverse/apple) | Workspace | DNS verification records |  |
| [Atlassian](https://www.runsonwhat.com/reverse/atlassian) | Dev Tools | DNS verification records |  |
| [Amazon SES](https://www.runsonwhat.com/reverse/ses) | Email Delivery | Email records |  |
| [Let's Encrypt](https://www.runsonwhat.com/reverse/letsencrypt) | Security & Compliance | DNS records |  |
| [Mailgun](https://www.runsonwhat.com/reverse/mailgun) | Email Delivery | DNS verification records |  |
| [DigiCert](https://www.runsonwhat.com/reverse/digicert) | Security & Compliance | DNS records |  |
| [DocuSign](https://www.runsonwhat.com/reverse/docusign) | Finance & Legal | DNS verification records |  |
| [Postmark](https://www.runsonwhat.com/reverse/postmark) | Email Delivery | Email records |  |
| [DMARC Digests](https://www.runsonwhat.com/reverse/dmarcdigests) | Security & Compliance | Email records |  |
| [Proton Mail](https://www.runsonwhat.com/reverse/proton) | Workspace | DNS verification records |  |

## FAQ

### What tools does FIRST — Forum of Incident Response and Security Teams use?

As of October 2026, runsonwhat has found 18 tools at FIRST — Forum of Incident Response and Security Teams (first.org) in public records. Edge & Hosting: Fastly and NS1. Application: Anthropic. Go-to-market: Zoho and Freshdesk. Company Ops: Google Workspace, reCAPTCHA and Apple Business. Last checked October 20, 2026.

### What CRM does FIRST — Forum of Incident Response and Security Teams use?

FIRST — Forum of Incident Response and Security Teams uses Zoho for its CRM, according to runsonwhat (October 2026). runsonwhat found Zoho through a subdomain that points at Zoho. Zoho is used by 63,208 companies runsonwhat tracks.

### What email provider does FIRST — Forum of Incident Response and Security Teams use?

FIRST — Forum of Incident Response and Security Teams uses Google Workspace for email and office software, alongside Apple Business and Proton Mail, according to runsonwhat (October 2026). runsonwhat found Google Workspace through email records that authorize Google Workspace. Google Workspace is used by 406,556 companies runsonwhat tracks.

### What does FIRST — Forum of Incident Response and Security Teams use for customer support?

FIRST — Forum of Incident Response and Security Teams uses Freshdesk for customer support and documentation, according to runsonwhat (October 2026). runsonwhat found Freshdesk through a subdomain that points at Freshdesk and code on first.org. Freshdesk is used by 12,652 companies runsonwhat tracks.

### Does FIRST — Forum of Incident Response and Security Teams use reCAPTCHA?

Yes. runsonwhat found reCAPTCHA at FIRST — Forum of Incident Response and Security Teams through reCAPTCHA code on first.org. reCAPTCHA is a Security & Compliance tool used by 289,297 companies runsonwhat tracks.

### Does FIRST — Forum of Incident Response and Security Teams use AI tools?

Yes. runsonwhat has found Anthropic at FIRST — Forum of Incident Response and Security Teams; Anthropic, for example, through a DNS verification record for Anthropic. AI services called only from servers leave no public trace, so FIRST — Forum of Incident Response and Security Teams may use more AI tools than these.

### Which companies have a tech stack similar to FIRST — Forum of Incident Response and Security Teams's?

The companies with the stacks most like FIRST — Forum of Incident Response and Security Teams' are Ace & Company, Applovin, Arktos.com and Primerio, according to runsonwhat (October 2026). Each shares 1 to 8 tools with FIRST — Forum of Incident Response and Security Teams, and rare tools count for more than common ones like Google Workspace, so the match reflects real stack choices.

### How does runsonwhat know what FIRST — Forum of Incident Response and Security Teams uses?

runsonwhat reads public records only. Of the 18 tools at FIRST — Forum of Incident Response and Security Teams, 11 were found through DNS records, 4 through email records, 2 through subdomains that point at the vendor and 1 through code on first.org. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and first.org about monthly.


---

Source: runsonwhat, https://www.runsonwhat.com/company/first.org (updated October 2026). Counts are companies with direct public evidence of the tool (DNS records, certificates, website code, a real-browser crawl, subprocessor lists), so they are lower bounds. Methodology: https://www.runsonwhat.com/methodology.