Skip to content
Reverse Whois integration › Security Incident Response integrations › Security Incident Response › Enterprise security case management applications › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

(Optional) Install and configure Whois

Install the Whois plugin to provide additional enrichment information on your domain lookups from the Reverse Whois API. This lookup provides additional enrichment data on the domain, such as the registration date, name of registrar, and country of origin.

Before you begin

  1. If you have not requested entitlement for the application, see Get entitlement for a Security Operations product or application for the Whois application from the ServiceNow Store.
  2. Obtain credentials for the Whois API key from the product website: WHOIS API website.

Role required: admin

Procedure

  1. If you have not installed the application, see Install a Security Operations integration and follow the steps to install it.

  2. After the installation completes, navigate to Integrations > Integrations Configurations and locate the Whois API tile.

  3. Select Configure.

Image omitted: reverse-whois-config-tile.png
A description of the app and the button used to initiate the configuration.
  1. In the Whois API Configuration dialog box, enter the API key you obtained from the product website.
Image omitted: reverse-config-9-4.png
Reverse Whois API Configuration completed configuration

  1. Select Submit.

    Configuration is successfully completed unless an error message is displayed. You can now run enrichment lookups on the domains returned from the Reverse Whois integration.

If an error message is displayed, the API key may be invalid.

Image omitted: reverse-whois-config-error.png
Example configuration error message

Parent Topic:Reverse Whois integration

Previous topic:Install and configure Reverse Whois

Next topic:Initiate the lookup for Reverse Whois