What does ThreatDown use?

As of October 2026, runsonwhat has found 33 tools at ThreatDown (threatdown.com) in public records. Edge & Hosting: Cloudflare, Amazon Web Services and Amazon Route 53. Application: jQuery, Google Fonts and Tailwind CSS. Data & Observability: Google Analytics, Google Tag Manager and VWO. Go-to-market: WordPress, Google Ads and Yoast SEO. Company Ops: Microsoft 365, SendGrid and Apple Business. Last checked October 20, 2026.

ThreatDown uses Amazon Web Services for hosting and cloud infrastructure, alongside WordPress VIP, according to runsonwhat (October 2026). runsonwhat found Amazon Web Services through a subdomain that points at Amazon Web Services and code on threatdown.com. Amazon Web Services is used by 146,155 companies runsonwhat tracks.

The sales tools runsonwhat has found at ThreatDown are ZoomInfo (October 2026); no CRM shows up in ThreatDown's public records. runsonwhat found ZoomInfo through ZoomInfo code on threatdown.com. ZoomInfo is used by 17,275 companies runsonwhat tracks.

ThreatDown uses Microsoft 365 for email and office software, alongside Apple Business, according to runsonwhat (October 2026). runsonwhat found Microsoft 365 through a DNS verification record for Microsoft 365 and email records. Microsoft 365 is used by 716,550 companies runsonwhat tracks.

ThreatDown uses Zendesk for customer support and documentation, according to runsonwhat (October 2026). runsonwhat found Zendesk through a subdomain that points at Zendesk and email records, and ThreatDown has used it since at least January 2024. Zendesk is used by 42,359 companies runsonwhat tracks.

ThreatDown uses Google Analytics for analytics, alongside Google Tag Manager, according to runsonwhat (October 2026). runsonwhat found Google Analytics through Google Analytics code on threatdown.com. Google Analytics is used by 892,574 companies runsonwhat tracks.

ThreatDown has used Amazon CloudFront since at least December 2023, going by the first public certificate of the threatdown.com subdomain that points at Amazon CloudFront. Other long-running tools at ThreatDown include Zendesk (since January 2024) and Marketo (since February 2025).

Yes. runsonwhat found jQuery at ThreatDown through jQuery code on threatdown.com. jQuery is a Frontend tool used by 922,806 companies runsonwhat tracks.

Yes. runsonwhat has found Anthropic at ThreatDown; Anthropic, for example, through a DNS verification record for Anthropic. AI services called only from servers leave no public trace, so ThreatDown may use more AI tools than these.

The companies with the stacks most like ThreatDown's are ShipBob, Jane, Constant Contact and Motive, according to runsonwhat (October 2026). Each shares 13 to 17 tools with ThreatDown, and rare tools count for more than common ones like Google Workspace, so the match reflects real stack choices.

runsonwhat reads public records only. Of the 33 tools at ThreatDown, 15 were found through code on threatdown.com, 11 through DNS records, 4 through subdomains that point at the vendor and 3 through email records. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and threatdown.com about monthly.