# Censys

**Canonical:** https://apis.io/providers/censys/  
**Website:** https://censys.com  
**APIs profiled:** 14

Censys is an internet intelligence and attack surface management platform that continuously scans the public IPv4 space, IPv6 announced ranges, and the global certificate transparency ecosystem to produce a comprehensive public dataset of internet-connected hosts, services, certificates, and web properties. The Censys Platform exposes this data through a unified REST API supporting host/web/certificate search, collections, threat hunting, adversary investigation, asset graph traversal, and supply-chain intelligence — making it a primary alternative to Shodan for security researchers, SOC teams, threat hunters, and attack-surface management programs.

## Kin Score — 60.1 / 100 (strong)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 60.1).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 70.1 |
| Governance | 25.0 |
| Contract Governance | 25.0 |
| Operational Transparency | 50.0 |
| Developer Ergonomics | 40.5 |
| Commercial Clarity | 84.2 |
| Access Clarity | 84.2 |

## Agent readiness — 38.9 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | partial |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (14)

- **Censys Account Management API** — Endpoints related to the Account Management product
- **Censys Adversary Investigation API** — Endpoints related to the Adversary Investigation product
- **Censys Asset Graphs API** — The Asset Graphs API from Censys — 2 operation(s) for asset graphs.
- **Censys Assets API** — The Assets API from Censys — 2 operation(s) for assets.
- **Censys Collections API** — Endpoints related to the Collections product
- **Censys Excluded Assets API** — The Excluded Assets API from Censys — 2 operation(s) for excluded assets.
- **Censys Global Data API** — Endpoints related to the Global Data product
- **Censys Graph Executions API** — The Graph Executions API from Censys — 2 operation(s) for graph executions.
- **Censys Risks API** — The Risks API from Censys — 1 operation(s) for risks.
- **Censys Seeds API** — The Seeds API from Censys — 2 operation(s) for seeds.
- **Censys Shards API** — The Shards API from Censys — 1 operation(s) for shards.
- **Censys Supply Chain Intelligence API** — Endpoints related to the Supply Chain Intelligence product
- **Censys Tags and Comments API** — Endpoints related to asset tagging and commenting
- **Censys Threat Hunting API** — Endpoints related to the Adversary Investigation product

## Agentic access (1)

- **Censys Agentic Access** — 88 operations · 36 acting

## Security (3)

- **Censys Authentication** — http · 1 scheme
- **Censys Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Censys Vulnerability Disclosure** — disclosure policy published

## Plans (1)

- **Censys Plans Pricing**

## Use cases (9)

- **External Attack Surface Management** — Discover unknown assets, monitor exposure, and prioritize risk across an organization's internet-facing footprint.
- **Threat Hunting** — Pivot across certificates, services, and endpoints to track adversary infrastructure with CensEye-driven discovery scans.
- **Adversary Investigation** — Investigate IPs, certificates, and hosts associated with known malicious activity; rescan suspect infrastructure on demand.
- **SOC Triage and Enrichment** — Enrich alerts in Splunk / SOAR / Google SecOps with Censys host, service, and certificate context.
- **Vulnerability Discovery** — Identify exposed services, deprecated TLS versions, and known-vulnerable software footprints at internet scale.
- **Certificate Inventory** — Search the certificate-transparency-backed corpus for organizational PKI inventory and rogue/expired cert detection.
- **Subdomain and Asset Discovery** — Enumerate subdomains and related assets via certificate, DNS, and IP-graph pivots.
- **Supply Chain Risk** — Track supplier exposure and weak links across third-party internet-facing assets.
- **Academic and Internet Measurement Research** — Long-running Censys research mission supporting peer-reviewed internet-scale measurement studies.

## Tags

Security, Internet Intelligence, Attack Surface Management, Threat Hunting, cyber-threat-intelligence, OSINT, Internet Scanning, Certificates, Asset Discovery

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/censys/). Scores are computed from the provider's own public artifacts under a published rubric.