CISO Tribune

Vendor comparison · 2 companies

Censys vs Mave

Censys supports investigations with real-time Internet infrastructure visibility and historical context. Mave runs investigations, searches, threat hunts, detection hardening, and governed responses across a customer's existing stack. CISO Tribune files both under Threat intelligence. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Censys
  • Mave
Censys vs Mave: Products, Customers and Funding Compared
CensysCensys supports investigations with real-time Internet infrastructure visibility and historical context.censys.comMaveMave runs investigations, searches, threat hunts, detection hardening, and governed responses across a customer's existing stack.mave.com
What it sells
  • Censys Platform[3][8][17][18][19][20][21]Delivers visibility and intelligence for triage, threat investigation, adversary hunting and Internet exposure management.
  • Censys ASM[8]Reveals Internet-facing assets, services and exposures across all 65,535 ports.
  • Adversary Investigation[3][4][5][9][17][19]An add-on module to the Censys Platform to detect, analyze and track threat infrastructure.
  • cencli[20]A command line tool for running search queries, looking up assets and performing aggregations.
  • AI SOC[1][14]Governed AI agents that investigate alerts, apply threat intelligence, hunt across tools, improve detections, and execute authorized response actions.
  • Threat Hunting[1][13]Runs continuous, cross-tool threat hunts for threats that never triggered an alert.
  • Detection Engineering[1][13]Finds coverage gaps, tunes noisy detection rules, and creates new detections.
  • Threat Intelligence[1][9][10][14]Converts relevant threat intelligence into investigations, threat hunts, detections, and authorized responses.
Categories
Headquarters
Ann Arbor, United States[2][21]Not stated on its pages
Founded
2017[1]Not stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 22, 2026Censys announced an expanded global Channel Partner Program and investments to accelerate its channel-first growth strategy.[14]
  • July 22, 2026Censys announced record first half 2026 growth, reflecting growing enterprise adoption of Internet intelligence.[13]
  • July 8, 2026Censys expanded its Internet Map to include real-time DNS visibility.[25]
  • June 18, 2026Censys announced its expansion into security operations, enabling organizations to use its internet intelligence across security workflows.[26]
  • June 18, 2026Censys announced its expansion into security operations, enabling organizations to use its Internet intelligence across security workflows.[12]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[6]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Censys sells to private and public sector security teams. Censys describes a plan for threat hunting and CTI teams looking to hunt, track and engineer detections for adversary campaigns and infrastructure. Censys describes a plan for enterprises that want to use Censys data across alert triage, IR, threat intel and detection engineering. Censys offers purpose-built internet intelligence with specialized datasets for government specific investigations and exposure management requirements. Censys offers Single Sign-On through a SAML-based integration to Enterprise and Government users.From its own pages, Mave sells mainly to security operations teams that run many tools and want investigation, hunting, detection work, and response across the stack they already have. Mave addresses managed security service providers that want to scale without adding analysts at the same rate as customers. Mave addresses organizations with multiple SIEMs, tenants, and subsidiaries. Mave addresses organizations that want to reduce SIEM ingestion and retention costs. Mave addresses organizations that want alert triage, investigation, and response in-house, and organizations with on-premises workloads alongside cloud and SaaS. Mave also describes an alternative package for smaller teams.
Last verified
September 27, 2026October 23, 2026

Where they overlap

  • Censys and Mave are both filed under Threat intelligence.

Where they differ, field by field

  • Censys's primary category is External attack surface management; Mave's is AI SOC analysts.
  • Mave is also filed under SIEM.
  • Censys lists Censys Platform, Censys ASM, Adversary Investigation and cencli. Mave lists AI SOC, Threat Hunting, Detection Engineering and Threat Intelligence.
  • Censys is headquartered in Ann Arbor, United States.
  • Censys was founded in 2017.

What it sells: Censys

What Censys Platform does[3][8][17][18][19][20][21]
Censys Platform has API endpoints for integrating Platform functionality with a customer tech stack. Censys Platform uses a language called Censys Query Language. Censys Platform includes a web property dataset covering name-based assets on the internet, including websites, APIs and web-based applications.
What Censys ASM does[8]
Censys ASM uses first-party scanning to find Internet-exposed assets, including services on nonstandard ports, self-signed certificates, hosts in residential networks and dangling DNS records. Censys ASM sends alerts on changes such as new hosts and services, open ports and reissued certificates. Censys ranks risks by severity, category and affected asset.
What Adversary Investigation does[3][4][5][9][17][19]
The Adversary Investigation module is an add-on to the Censys Platform for organizations to detect, analyze and track threat infrastructure. Actions that use CensEye to discover related infrastructure for a host, web property or certificate are only available to users with access to the Adversary Investigation module.

What it sells: Mave

What AI SOC does[1][14]
Mave runs an AI SOC across the security stack a customer already uses. Mave queries live data in the systems that already hold it, reasons across the evidence, and takes the next authorized action. No telemetry migration, duplicate data lake, central index, or fixed SOAR playbook is required.
What Threat Hunting does[1][13]
Mave applies threat intelligence to the customer's environment and runs continuous, cross-tool threat hunts across the SIEM, EDR, cloud, identity, and other security tools. Each finding becomes a complete investigation, a new or tuned detection, or an authorized response action. Source telemetry stays in place, with no new data lake, central index, or prebuilt correlation pipeline.
What Detection Engineering does[1][13]
Mave works across detection languages and formats, including SPL, KQL, YARA-L, Sigma, EQL, Lucene, and SQL-based rules. Agents review, create, translate, test, and tune detection content in the existing workflow, validate it against historical data where it already lives, and commit or deploy approved changes.
What Threat Intelligence does[1][9][10][14]
Mave determines which campaigns, actors, vulnerabilities, indicators, and techniques are relevant to the customer's environment. Mave evaluates each threat against assets, identities, technologies, vulnerabilities, detections, and live activity.

Questions about Censys and Mave

What do Censys and Mave sell?
Censys sells Censys Platform, Censys ASM, Adversary Investigation and cencli. Mave sells AI SOC, Threat Hunting, Detection Engineering and Threat Intelligence.
Are Censys and Mave in the same category?
They share Threat intelligence. Censys's primary category is External attack surface management and Mave's is AI SOC analysts.
Where are Censys and Mave headquartered?
Censys is headquartered in Ann Arbor, United States.
When were Censys and Mave founded?
Censys was founded in 2017.
Who are Censys and Mave sold to?
From its own pages, Censys sells to private and public sector security teams. From its own pages, Mave sells mainly to security operations teams that run many tools and want investigation, hunting, detection work, and response across the stack they already have.
What have Censys and Mave announced recently?
September 22, 2026: Censys announced an expanded global Channel Partner Program and investments to accelerate its channel-first growth strategy.

About Censys

Censys supports investigations with real-time Internet infrastructure visibility and historical context. Censys supports tracking attacker infrastructure and uncovering related assets. Censys supports discovering unknown assets, identifying critical risks and protecting an external attack surface. Censys supports identifying third-party risk by continuously monitoring supplier Internet exposure. Censys names Global 2000 enterprises and governments as the organizations that choose it for Security Operations and Exposure Management. Censys ARC publishes original research covering emerging threats, attacker infrastructure, vulnerabilities and Internet-wide exposure.[8][10]

Censys ASM reveals Internet-facing assets, services and exposures across all 65,535 ports, using the Censys Internet Map. Censys maps the global internet across all 65K ports to show what attackers, customers and regulators can see. Censys ASM uses first-party scanning to find Internet-exposed assets, including services on nonstandard ports, self-signed certificates, hosts in residential networks and dangling DNS records. Censys maps the JavaScript libraries, web technologies and plugins running across an environment, then detects and flags the vulnerabilities and risks present.[8][16]

Censys ASM monitors a surface continuously and sends alerts on changes such as new hosts and services, open ports and reissued certificates. Censys ranks risks by severity, category and affected asset. Censys ASM integrates with ticketing, SIEM, vulnerability management and other tooling to auto-create, route and track remediation tasks. The Censys Assistant takes plain-language questions about an inventory, such as which CVEs affect it or which cloud providers are in use, and generates executive-ready reports on demand.[8]

Censys Platform has API endpoints for integrating Platform functionality with a customer tech stack. Censys Platform uses a language called Censys Query Language. Censys Platform includes a web property dataset covering name-based assets on the internet, including websites, APIs and web-based applications. Collections let users track and monitor the results of a Censys query over time. The Adversary Investigation module is an add-on to the Censys Platform for organizations to detect, analyze and track threat infrastructure. Censys offers CensEye for automated pivoting jobs that find assets related to an IP, web property or certificate. Censys offers the cencli command line tool for running search queries, looking up assets and performing aggregations.[4][9][17][18][19][20]

Censys Platform data can enrich IPs, web properties and certificates in Google SecOps. Censys has an Attack Surface Management (ASM) integration with Google SecOps. Censys integrates natively with many SIEM, SOAR, TIP and other security tools. API access is included across all Censys tiers.[19]

Censys Credits power searches, lookups and other actions within the Censys Platform. Censys sets Starter plans to begin at 500 credits, and Enterprise customers use credits only for API usage. Censys Platform access is organised in Censys Free, Censys Starter, Censys Search and Censys Core tiers. Censys describes a plan for threat hunting and CTI teams looking to hunt, track and engineer detections for adversary campaigns and infrastructure. Censys describes a further plan for enterprises that want to use Censys data across alert triage, IR, threat intel and detection engineering. Censys offers Single Sign-On through a SAML-based integration to Enterprise and Government users. Censys offers purpose-built internet intelligence with specialized datasets for government specific investigations and exposure management requirements.[20]

Censys created fast Internet scanning at the University of Michigan and released the ZMap open source scanner. Censys introduced Censys Search and data downloads, initially scanning 16 popular Internet protocols. Censys evolved from a research project into a free-standing company. Censys architected a new scan engine with proprietary scanning technology. Censys goes to market in Nordics, France, Australia, Singapore, Japan and more. Censys says it empowers private and public sector security teams.[4][5][8][9][10][11][16]

Censys on the record

Sources

Censys full record

  1. [1]Censys introduces the ground truth for internet intelligence the censys internet map 301938734Censys via PR Newswire · prnewswire.com · published September 26, 2023 · Tier A
  2. [2]CareersCensys · censys.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Censys | The Authority for Internet Intelligence and InsightsCensys · undated page, accessed October 23, 2026 · Tier A
  4. [4]Platform API Transition GuideCensys · published October 5, 2026 · Tier A
  5. [5]SAML AuthenticationCensys · undated page, accessed October 23, 2026 · Tier A
  6. [6]Censys Attack Surface Management Reviews & Product Details - G2G2 · undated page, accessed October 23, 2026 · Tier C
  7. [7]Censys Search - CensysCensys · undated page, accessed November 3, 2026 · Tier A
  8. [8]Censys | Attack Surface Management | Internet VisibilityCensys · undated page, accessed November 3, 2026 · Tier A
  9. [9]Adversary Investigation - CensysCensys · undated page, accessed November 3, 2026 · Tier A
  10. [10]Critical Infrastructure Monitoring - CensysCensys · undated page, accessed November 3, 2026 · Tier A
  11. [11]Trusted by Global Leaders for VisibilityCensys · undated page, accessed November 3, 2026 · Tier A
  12. [12]Censys Expands Into Security Operations with Internet Intelligence-Powered WorkflowsCensys · published June 18, 2026 · Tier A
  13. [13]Censys Delivers Record First Half 2026 Growth as AI Driven Demand for Internet Intelligence AcceleratesCensys · published July 22, 2026 · Tier A
  14. [14]Censys Transforms Global Channel Program to Accelerate Partner-Led GrowthCensys · published September 22, 2026 · Tier A
  15. [15]Censys Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed November 3, 2026 · Tier C
  16. [16]Censys | External Exposure Management & Attack Surface MappingCensys · undated page, accessed November 10, 2026 · Tier A
  17. [17]Platform API Transition GuideCensys · undated page, accessed November 10, 2026 · Tier A
  18. [18]Platform FAQsCensys · undated page, accessed November 10, 2026 · Tier A
  19. [19]Google SecOps SOAR IntegrationCensys · undated page, accessed November 10, 2026 · Tier A
  20. [20]Platform CLI ToolCensys · undated page, accessed November 10, 2026 · Tier A
  21. [21]Pricing | CensysCensys · undated page, accessed November 10, 2026 · Tier A
  22. [22]Censys Built by Cybersecurity Experts for Real-Time Threat IntelligenceCensys · undated page, accessed November 10, 2026 · Tier A
  23. [23]Censys Unveils Censys ARC, Formalizing Its Global Internet Threat Research TeamCensys · published March 10, 2026 · Tier A
  24. [24]Censys Powers SOC Modernization with Real-Time Internet Context and Risk ScoringCensys · published April 9, 2026 · Tier A
  25. [25]Censys Expands Its Internet Map to Include DNS IntelligenceCensys · published July 8, 2026 · Tier A
  26. [26]Censys Expands Into Security Operations with Internet Intelligence-Powered WorkflowsCensys · published June 18, 2026 · Tier A

Mave full record

  1. [1]mave.comMave · mave.com · undated page, accessed October 23, 2026 · Tier A
  2. [2]Terms and conditionsMave · mave.com · published February 15, 2026 · Tier A
  3. [3]AI Security Operations Platform | MaveMave · undated page, accessed November 10, 2026 · Tier A
  4. [4]Mave Platform | The SecOps Operating SystemMave · undated page, accessed November 10, 2026 · Tier A
  5. [5]Reduce MDR Reliance | MaveMave · undated page, accessed November 10, 2026 · Tier A
  6. [6]SIEM Cost Reduction & Replacement | MaveMave · undated page, accessed November 10, 2026 · Tier A
  7. [7]On-Prem SecOps Deployment | MaveMave · undated page, accessed November 10, 2026 · Tier A
  8. [8]Multi-SIEM & Post-M&A SecOps | MaveMave · undated page, accessed November 10, 2026 · Tier A
  9. [9]Multi-Tenant SecOps For MSSPs | MaveMave · undated page, accessed November 10, 2026 · Tier A
  10. [10]Threat Hunting | MaveMave · undated page, accessed November 10, 2026 · Tier A
  11. [11]Detection Engineering with MITRE ATT&CK | MaveMave · undated page, accessed November 10, 2026 · Tier A
  12. [12]Threat Intelligence | MaveMave · undated page, accessed November 10, 2026 · Tier A
  13. [13]Pricing | MaveMave · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI SOC Agents for Full-Loop SecOps | MaveMave · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.