CISO Tribune

Vendor comparison · 2 companies

Censys vs Group-IB

Censys supports investigations with real-time Internet infrastructure visibility and historical context. Group-IB is a Prediction-First cybersecurity company built on collective defense. CISO Tribune files both under External attack surface management and Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Censys
  • Group-IB
Censys vs Group-IB: Products, Customers and Funding Compared
CensysCensys supports investigations with real-time Internet infrastructure visibility and historical context.censys.comGroup-IBGroup-IB is a Prediction-First cybersecurity company built on collective defense.group-ib.com
What it sells
  • Censys Platform[3][8][17][18][19][20][21]Delivers visibility and intelligence for triage, threat investigation, adversary hunting and Internet exposure management.
  • Censys ASM[8]Reveals Internet-facing assets, services and exposures across all 65,535 ports.
  • Adversary Investigation[3][4][5][9][17][19]An add-on module to the Censys Platform to detect, analyze and track threat infrastructure.
  • cencli[20]A command line tool for running search queries, looking up assets and performing aggregations.
  • Threat Intelligence[1][3][5]Group-IB Threat Intelligence Platform has a graph interface for investigating cyber threats.
  • Attack Surface Management[1][5]Group-IB delivers external attack surface management that automatically maps every asset and provides continuous attack surface monitoring and analysis.
  • Fraud Protection[1][4]Group-IB's online fraud protection platform uses global fraud intelligence, device fingerprinting and behavioral analysis to detect fraud.
  • Digital Risk Protection[1][6][11]Group-IB's digital risk protection solution continuously monitors and detects threats across the open, deep and dark web.
  • Managed XDR[7]Group-IB Managed XDR solution secures an email gateway using intelligence-driven behavioral analysis technology.
  • Business Email Protection[1][7]Group-IB offers Business Email Protection against phishing and scam attacks.
Categories
Headquarters
Ann Arbor, United States[2][21]Not stated on its pages
Founded
2017[1]Not stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 22, 2026Censys announced an expanded global Channel Partner Program and investments to accelerate its channel-first growth strategy.[14]
  • July 22, 2026Censys announced record first half 2026 growth, reflecting growing enterprise adoption of Internet intelligence.[13]
  • July 8, 2026Censys expanded its Internet Map to include real-time DNS visibility.[25]
  • June 18, 2026Censys announced its expansion into security operations, enabling organizations to use its internet intelligence across security workflows.[26]
  • June 18, 2026Censys announced its expansion into security operations, enabling organizations to use its Internet intelligence across security workflows.[12]
  • October 29, 2026Group-IB's Digital Risk Protection solution is now available in AWS Marketplace.[11]
  • January 27, 2026Group-IB launches a Cloud Security Posture Management solution as part of its Unified Risk Platform.[10]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[6]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[12]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Censys sells to private and public sector security teams. Censys describes a plan for threat hunting and CTI teams looking to hunt, track and engineer detections for adversary campaigns and infrastructure. Censys describes a plan for enterprises that want to use Censys data across alert triage, IR, threat intel and detection engineering. Censys offers purpose-built internet intelligence with specialized datasets for government specific investigations and exposure management requirements. Censys offers Single Sign-On through a SAML-based integration to Enterprise and Government users.Not written yet
Last verified
September 27, 2026November 4, 2026

Where they overlap

  • Censys and Group-IB are both filed under External attack surface management and Threat intelligence.

Where they differ, field by field

  • Censys's primary category is External attack surface management; Group-IB's is Threat intelligence.
  • Group-IB is also filed under Digital risk protection and Fraud prevention.
  • Censys lists Censys Platform, Censys ASM, Adversary Investigation and cencli. Group-IB lists Threat Intelligence, Attack Surface Management, Fraud Protection, Digital Risk Protection, Managed XDR and 1 more.
  • Censys is headquartered in Ann Arbor, United States.
  • Censys was founded in 2017.

What it sells: Censys

What Censys Platform does[3][8][17][18][19][20][21]
Censys Platform has API endpoints for integrating Platform functionality with a customer tech stack. Censys Platform uses a language called Censys Query Language. Censys Platform includes a web property dataset covering name-based assets on the internet, including websites, APIs and web-based applications.
What Censys ASM does[8]
Censys ASM uses first-party scanning to find Internet-exposed assets, including services on nonstandard ports, self-signed certificates, hosts in residential networks and dangling DNS records. Censys ASM sends alerts on changes such as new hosts and services, open ports and reissued certificates. Censys ranks risks by severity, category and affected asset.
What Adversary Investigation does[3][4][5][9][17][19]
The Adversary Investigation module is an add-on to the Censys Platform for organizations to detect, analyze and track threat infrastructure. Actions that use CensEye to discover related infrastructure for a host, web property or certificate are only available to users with access to the Adversary Investigation module.

What it sells: Group-IB

What Threat Intelligence does[1][3][5]
Group-IB's digital threat intelligence solution, powered by the Unified Risk Platform, integrates with SIEM, SOAR and TIP solutions, or via API and STIIX/TAXII data transfer. Group-IB threat intelligence lets users uncover illicit activities and monitor the dark web to determine if their organization is mentioned there. Group-IB's Threat Intelligence solution is available in AWS Marketplace.
What Attack Surface Management does[1][5]
Group-IB's platform enriches findings with threat intelligence to assess risk and prioritize issues. The Assets tab lists Internet-facing assets that are part of an organization's infrastructure, which can be confirmed or ignored. The Issues tab lists identified issues among confirmed assets, which can be marked as Under Review, Solved, Ignored or False Positive. Group-IB's attack surface platform checks confirmed assets for common vulnerabilities and assigns each one a risk score.
What Fraud Protection does[1][4]
Group-IB device fingerprinting technology is powered by the patented Global ID innovation. Group-IB device fingerprinting identifies devices, generates unique fingerprints, tracks fraudulent activities and uncovers hidden multi-accounting, anti-detection browsers and account farming. Group-IB Fraud Protection's AI uses a combination of signature analysis and User Behavior Analysis (UBA).
What Digital Risk Protection does[1][6][11]
Group-IB Digital Risk Protection solution implements a three-stage takedown process for violations such as scam and phishing. Group-IB Digital Risk Protection uses machine learning to detect scams, phishing and other violations. Group-IB analysts research scam groups, actors and popular schemes, creating new assets for monitoring and public reports.

Questions about Censys and Group-IB

What do Censys and Group-IB sell?
Censys sells Censys Platform, Censys ASM, Adversary Investigation and cencli. Group-IB sells Threat Intelligence, Attack Surface Management, Fraud Protection, Digital Risk Protection, Managed XDR and 1 more.
Are Censys and Group-IB in the same category?
They share External attack surface management and Threat intelligence. Censys's primary category is External attack surface management and Group-IB's is Threat intelligence.
Where are Censys and Group-IB headquartered?
Censys is headquartered in Ann Arbor, United States.
When were Censys and Group-IB founded?
Censys was founded in 2017.
Who are Censys and Group-IB sold to?
From its own pages, Censys sells to private and public sector security teams.
What have Censys and Group-IB announced recently?
September 22, 2026: Censys announced an expanded global Channel Partner Program and investments to accelerate its channel-first growth strategy. October 29, 2026: Group-IB's Digital Risk Protection solution is now available in AWS Marketplace.

About Censys

Censys supports investigations with real-time Internet infrastructure visibility and historical context. Censys supports tracking attacker infrastructure and uncovering related assets. Censys supports discovering unknown assets, identifying critical risks and protecting an external attack surface. Censys supports identifying third-party risk by continuously monitoring supplier Internet exposure. Censys names Global 2000 enterprises and governments as the organizations that choose it for Security Operations and Exposure Management. Censys ARC publishes original research covering emerging threats, attacker infrastructure, vulnerabilities and Internet-wide exposure.[8][10]

Censys ASM reveals Internet-facing assets, services and exposures across all 65,535 ports, using the Censys Internet Map. Censys maps the global internet across all 65K ports to show what attackers, customers and regulators can see. Censys ASM uses first-party scanning to find Internet-exposed assets, including services on nonstandard ports, self-signed certificates, hosts in residential networks and dangling DNS records. Censys maps the JavaScript libraries, web technologies and plugins running across an environment, then detects and flags the vulnerabilities and risks present.[8][16]

Censys ASM monitors a surface continuously and sends alerts on changes such as new hosts and services, open ports and reissued certificates. Censys ranks risks by severity, category and affected asset. Censys ASM integrates with ticketing, SIEM, vulnerability management and other tooling to auto-create, route and track remediation tasks. The Censys Assistant takes plain-language questions about an inventory, such as which CVEs affect it or which cloud providers are in use, and generates executive-ready reports on demand.[8]

Censys Platform has API endpoints for integrating Platform functionality with a customer tech stack. Censys Platform uses a language called Censys Query Language. Censys Platform includes a web property dataset covering name-based assets on the internet, including websites, APIs and web-based applications. Collections let users track and monitor the results of a Censys query over time. The Adversary Investigation module is an add-on to the Censys Platform for organizations to detect, analyze and track threat infrastructure. Censys offers CensEye for automated pivoting jobs that find assets related to an IP, web property or certificate. Censys offers the cencli command line tool for running search queries, looking up assets and performing aggregations.[4][9][17][18][19][20]

Censys Platform data can enrich IPs, web properties and certificates in Google SecOps. Censys has an Attack Surface Management (ASM) integration with Google SecOps. Censys integrates natively with many SIEM, SOAR, TIP and other security tools. API access is included across all Censys tiers.[19]

Censys Credits power searches, lookups and other actions within the Censys Platform. Censys sets Starter plans to begin at 500 credits, and Enterprise customers use credits only for API usage. Censys Platform access is organised in Censys Free, Censys Starter, Censys Search and Censys Core tiers. Censys describes a plan for threat hunting and CTI teams looking to hunt, track and engineer detections for adversary campaigns and infrastructure. Censys describes a further plan for enterprises that want to use Censys data across alert triage, IR, threat intel and detection engineering. Censys offers Single Sign-On through a SAML-based integration to Enterprise and Government users. Censys offers purpose-built internet intelligence with specialized datasets for government specific investigations and exposure management requirements.[20]

Censys created fast Internet scanning at the University of Michigan and released the ZMap open source scanner. Censys introduced Censys Search and data downloads, initially scanning 16 popular Internet protocols. Censys evolved from a research project into a free-standing company. Censys architected a new scan engine with proprietary scanning technology. Censys goes to market in Nordics, France, Australia, Singapore, Japan and more. Censys says it empowers private and public sector security teams.[4][5][8][9][10][11][16]

Censys on the record

Sources

Censys full record

  1. [1]Censys introduces the ground truth for internet intelligence the censys internet map 301938734Censys via PR Newswire · prnewswire.com · published September 26, 2023 · Tier A
  2. [2]CareersCensys · censys.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Censys | The Authority for Internet Intelligence and InsightsCensys · undated page, accessed October 23, 2026 · Tier A
  4. [4]Platform API Transition GuideCensys · published October 5, 2026 · Tier A
  5. [5]SAML AuthenticationCensys · undated page, accessed October 23, 2026 · Tier A
  6. [6]Censys Attack Surface Management Reviews & Product Details - G2G2 · undated page, accessed October 23, 2026 · Tier C
  7. [7]Censys Search - CensysCensys · undated page, accessed November 3, 2026 · Tier A
  8. [8]Censys | Attack Surface Management | Internet VisibilityCensys · undated page, accessed November 3, 2026 · Tier A
  9. [9]Adversary Investigation - CensysCensys · undated page, accessed November 3, 2026 · Tier A
  10. [10]Critical Infrastructure Monitoring - CensysCensys · undated page, accessed November 3, 2026 · Tier A
  11. [11]Trusted by Global Leaders for VisibilityCensys · undated page, accessed November 3, 2026 · Tier A
  12. [12]Censys Expands Into Security Operations with Internet Intelligence-Powered WorkflowsCensys · published June 18, 2026 · Tier A
  13. [13]Censys Delivers Record First Half 2026 Growth as AI Driven Demand for Internet Intelligence AcceleratesCensys · published July 22, 2026 · Tier A
  14. [14]Censys Transforms Global Channel Program to Accelerate Partner-Led GrowthCensys · published September 22, 2026 · Tier A
  15. [15]Censys Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed November 3, 2026 · Tier C
  16. [16]Censys | External Exposure Management & Attack Surface MappingCensys · undated page, accessed November 10, 2026 · Tier A
  17. [17]Platform API Transition GuideCensys · undated page, accessed November 10, 2026 · Tier A
  18. [18]Platform FAQsCensys · undated page, accessed November 10, 2026 · Tier A
  19. [19]Google SecOps SOAR IntegrationCensys · undated page, accessed November 10, 2026 · Tier A
  20. [20]Platform CLI ToolCensys · undated page, accessed November 10, 2026 · Tier A
  21. [21]Pricing | CensysCensys · undated page, accessed November 10, 2026 · Tier A
  22. [22]Censys Built by Cybersecurity Experts for Real-Time Threat IntelligenceCensys · undated page, accessed November 10, 2026 · Tier A
  23. [23]Censys Unveils Censys ARC, Formalizing Its Global Internet Threat Research TeamCensys · published March 10, 2026 · Tier A
  24. [24]Censys Powers SOC Modernization with Real-Time Internet Context and Risk ScoringCensys · published April 9, 2026 · Tier A
  25. [25]Censys Expands Its Internet Map to Include DNS IntelligenceCensys · published July 8, 2026 · Tier A
  26. [26]Censys Expands Into Security Operations with Internet Intelligence-Powered WorkflowsCensys · published June 18, 2026 · Tier A

Group-IB full record

  1. [1]group-ib.comGroup-IB · group-ib.com · undated page, accessed November 4, 2026 · Tier A
  2. [2]Group-IB | Prediction-First Cybersecurity and Anti-FraudGroup-IB · undated page, accessed November 10, 2026 · Tier A
  3. [3]Threat Intelligence Platform | Cyber Threat Intelligence Software | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  4. [4]Fraud Protection Service with Online Fraud Protection Software | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  5. [5]Attack Surface Management & Monitoring Solutions Platform | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  6. [6]Digital Risk Protection & Digital Brand Protection Services | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  7. [7]Solutions for Anti-Phishing and Scam Protection | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  8. [8]Blockchain Security: Safeguard Your Crypto Business | Group-IBGroup-IB · undated page, accessed November 10, 2026 · Tier A
  9. [9]OT ICS Cybersecurity Threats: Tactics, Paths, DefensesGroup-IB · undated page, accessed November 10, 2026 · Tier A
  10. [10]Group-IB launches Cloud Security Posture Management with advanced misconfiguration detection and cloud compliance monitoring | Group-IBGroup-IB · published January 27, 2026 · Tier A
  11. [11]Group-IB launches Digital Risk Protection availability in AWS Marketplace | Group-IBGroup-IB · published October 29, 2026 · Tier A
  12. [12]Group-IB Threat Intelligence Reviews & Product DetailsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.