About Censys
The Censys home page describes four uses: SOC triage and investigations, threat hunting and adversary tracking, exposure management, and supplier intelligence. For supplier intelligence, Censys says it continuously monitors supplier Internet exposure to identify third-party risk.
Censys describes it as a way to quickly look up hosts, services and infrastructure across the global Internet. Censys says its fingerprints reveal software versions, hardware manufacturers and known vulnerabilities with CVE context.
Censys ASM is the attack surface management product. Censys says it maps exposure across all 65,535 ports using first-party scanning, finding assets such as services on nonstandard ports, self-signed certificates, hosts in residential networks and dangling DNS records. Censys ASM monitors for changes such as new hosts and services, open ports and reissued certificates. The Censys Assistant lets users ask plain-language questions about their inventory and generate reports.[8]
Censys Adversary Investigation turns first-party scanning into a map of attacker infrastructure. Censys ARC is the Censys Advanced Research Collective, which publishes research on emerging threats and attacker infrastructure.[8][9]
Censys says it validates externally accessible HMIs, SCADA gateways and remote access services with reachability, fingerprints and screenshots. It also generates reporting aligned to NERC CIP, NIST SP 800-82, IEC 62443 and NIST CSF.[10]
Censys names customers across several sectors. Censys says Global 2000 enterprises and governments choose it to modernize Security Operations and Exposure Management.[4][5][8][9][10][11]
Censys on the record