About Censys
Censys supports investigations with real-time Internet infrastructure visibility and historical context. Censys supports tracking attacker infrastructure and uncovering related assets. Censys supports discovering unknown assets, identifying critical risks and protecting an external attack surface. Censys supports identifying third-party risk by continuously monitoring supplier Internet exposure. Censys names Global 2000 enterprises and governments as the organizations that choose it for Security Operations and Exposure Management. Censys ARC publishes original research covering emerging threats, attacker infrastructure, vulnerabilities and Internet-wide exposure.[8][10]
Censys ASM reveals Internet-facing assets, services and exposures across all 65,535 ports, using the Censys Internet Map. Censys maps the global internet across all 65K ports to show what attackers, customers and regulators can see. Censys ASM uses first-party scanning to find Internet-exposed assets, including services on nonstandard ports, self-signed certificates, hosts in residential networks and dangling DNS records. Censys maps the JavaScript libraries, web technologies and plugins running across an environment, then detects and flags the vulnerabilities and risks present.[8][16]
Censys ASM monitors a surface continuously and sends alerts on changes such as new hosts and services, open ports and reissued certificates. Censys ranks risks by severity, category and affected asset. Censys ASM integrates with ticketing, SIEM, vulnerability management and other tooling to auto-create, route and track remediation tasks. The Censys Assistant takes plain-language questions about an inventory, such as which CVEs affect it or which cloud providers are in use, and generates executive-ready reports on demand.[8]
Censys Platform has API endpoints for integrating Platform functionality with a customer tech stack. Censys Platform uses a language called Censys Query Language. Censys Platform includes a web property dataset covering name-based assets on the internet, including websites, APIs and web-based applications. Collections let users track and monitor the results of a Censys query over time. The Adversary Investigation module is an add-on to the Censys Platform for organizations to detect, analyze and track threat infrastructure. Censys offers CensEye for automated pivoting jobs that find assets related to an IP, web property or certificate. Censys offers the cencli command line tool for running search queries, looking up assets and performing aggregations.[4][9][17][18][19][20]
Censys Platform data can enrich IPs, web properties and certificates in Google SecOps. Censys has an Attack Surface Management (ASM) integration with Google SecOps. Censys integrates natively with many SIEM, SOAR, TIP and other security tools. API access is included across all Censys tiers.[19]
Censys Credits power searches, lookups and other actions within the Censys Platform. Censys sets Starter plans to begin at 500 credits, and Enterprise customers use credits only for API usage. Censys Platform access is organised in Censys Free, Censys Starter, Censys Search and Censys Core tiers. Censys describes a plan for threat hunting and CTI teams looking to hunt, track and engineer detections for adversary campaigns and infrastructure. Censys describes a further plan for enterprises that want to use Censys data across alert triage, IR, threat intel and detection engineering. Censys offers Single Sign-On through a SAML-based integration to Enterprise and Government users. Censys offers purpose-built internet intelligence with specialized datasets for government specific investigations and exposure management requirements.[20]
Censys created fast Internet scanning at the University of Michigan and released the ZMap open source scanner. Censys introduced Censys Search and data downloads, initially scanning 16 popular Internet protocols. Censys evolved from a research project into a free-standing company. Censys architected a new scan engine with proprietary scanning technology. Censys goes to market in Nordics, France, Australia, Singapore, Japan and more. Censys says it empowers private and public sector security teams.[4][5][8][9][10][11][16]
Censys on the record