Censys AI Agents: Automate Investigations and Amplify Your Threat Intel
Learn how Censys Investigator works, example use cases, and how you can use it to build repeatable workflows in your environment.
Topic
Product News
29 posts
Web Scanning in Censys ASM Just Got Deeper
See what’s really running on your website. Censys ASM’s web scanning surfaces hidden risks across your attack surface, automatically.
New on the Map — September 2026: 22 Protocol and Endpoint Scanners
CISA-flagged Cisco SD-WAN flaws, ransomware-linked STOMP brokers, and exposed Hikvision cameras: see what scanners we added this month.
Introducing Censys CLI Skills: AI-Assisted Investigations at Scale
At 2 a.m., a workstation makes an outbound TLS connection to a VPS on port 7443. The EDR flags it. A Tier 1 analyst on her third night shift (and her third cup of coffee) pulls up the IP: DigitalOcean, Linux, a self-signed certificate, nothing in the usual reputation feeds. She writes “no further action” […]
New on the Map — August 2026: 14 Protocol Scanners
CISA-flagged KNX systems, exposed Redshift clusters, and camera botnets: See what scanners we’ve added this month and how to check your exposure.
What the 2026 Verizon DBIR Signals About Internet Intelligence and External Visibility
2026 Verizon DBIR: AI is accelerating the threat landscape. Learn why Censys Intelligence is critical for cybersecurity defenders.
New Protocol Scanners: Shining a Light on Remote Access Tools, ICS Controllers, and More
Censys announces 8 new protocol scanners including Cisco NSI, Adobe Flash Socket Policy, MikroTik RouterOS, RustDesk & more. Discover exposed services and hidden infrastructure risks.
Everything You Need to Know About the Deprecation of Legacy Search
Censys Legacy Search is deprecating Sept 2026. Learn about migrating to Censys Platform—featuring MFA, AI assistant, audit logs & a streamlined experience.
Prioritize What Matters: Introducing Cloud Asset Context in Censys ASM
Introducing Cloud Asset Context in Censys ASM—enrich attack surface management with cloud tags, ownership data & metadata from AWS, Azure, GCP & Wiz for faster remediation.
Censys Assistant Is Now Generally Available
Censys Assistant is now GA — an AI-powered cybersecurity tool that lets you investigate hosts, domains & certificates using natural language. Faster triage & threat hunting for SOC teams.
Internet Intelligence for All: New Features Available for Free Users
Censys announces free platform features: Collections for asset monitoring, Lookup APIs, and a new CLI tool. Access detailed insights on 140+ internet services today.
Introducing Censys Assistant: Your AI Partner in Cybersecurity
Introducing Censys Assistant – an AI-powered cybersecurity tool that lets you query Internet intelligence in natural language. Faster investigations, instant insights. Now in beta.
Introducing the Censys CLI
Introducing the Censys CLI—access powerful Internet intelligence from your terminal. Search hosts, certificates, and domains, automate workflows, and hunt threats without leaving the command line.
Introducing Insights in Censys ASM: From Data to Actionable Security Outcomes
Discover how Censys ASM Insights Experience transforms attack surface data into actionable dashboards. Track exposures, ensure software compliance, and reduce risk faster. Learn more.
Announcing the Threat Hunting MCP Server
Discover the Censys Threat Hunting MCP Server—track adversary infrastructure using natural language AI. Streamline threat detection with conversational, iterative workflows.
Announcing the Investigation Manager: A New Way to Hunt for Adversary Infrastructure
Introducing Investigation Manager: a visual workspace in Censys Threat Hunting Module for tracking adversary infrastructure. Pivot with CensEye, map threats, and streamline investigations.
From Questions to Insights: The ASM MCP Server
Discover Censys ASM MCP Server — run context-rich attack surface investigations using AI. Detect new assets, risks & vulnerabilities faster to improve MTTD.
Using the Censys API for Advanced Threat Hunting
Discover Censys's new value-counts API endpoint for faster adversary infrastructure pivoting. Batch multiple queries in one call—replacing Censeye's limitations with efficient threat hunting.
Introducing Additional Open Directory Intelligence
Discover how enhanced open directory intelligence helps threat hunters unmask adversary operations. Explore new tools for detecting malicious files, exploit kits & suspicious directories proactively.
Streamline Security Operations with the New Censys Chrome Extension
Instantly look up IP addresses, exposed ports, WHOIS & DNS data right in your browser. Speed up security investigations—no more tab switching.**
See What Attackers See: Introducing Web Screenshots on the Censys Platform
Censys Web Screenshots: Visually inspect exposed assets with recurring and on-demand screenshots. Help threat hunters, SOC analysts, and pentesters identify risks faster. Beta now live.
Introducing the new Censys MCP Server
Censys MCP Server gives AI agents real-time access to the Censys Internet Map. Hunt threats, triage incidents & automate security workflows at machine speed—no custom code required.
Cert Happens. Protecting Your Brand from Phishy Lookalikes with Censys Collections
Discover how Certificate Transparency (CT) log monitoring protects your domains from malicious certs, phishing & shadow IT. Learn how Censys makes CT monitoring easy.
ASM CVE Exploit Context: A Smarter Way to Prioritize Vulnerabilities
Censys ASM's new CVE Exploit Context feature helps prioritize vulnerabilities with real-world exploit data. Cut through the noise—see which CVEs attackers target most.
Internet-scale Proactive Threat Hunting and Detection
Censys Threat Hunting Module is now generally available! Track adversary infrastructure, detect emerging threats, and gain unparalleled Internet intelligence. Explore the new Censys Platform.
Introducing the New Censys Threat Hunting Module: Proactive Defense for Modern Threats
Discover the new Censys Threat Hunting Module — proactively track adversary infrastructure, accelerate investigations, and dismantle threats before they strike. See a demo today!
Introducing the Ports & Protocols Dashboard: A New Dimension of Exposure Intelligence
**Discover exposed ports & protocols with Censys ASM's new dashboard. Gain real-time attack surface visibility across all 65K+ ports to find hidden risks and misconfigurations fast.**
Lightweight Protocol Scanning
Traditionally, Censys has focused on “deep” scans — scans which do a full analysis of the service behind them and break out key values into fields to be searched on later. Some protocols were captured by banner grabs of “UNKNOWN” services and were just untagged, making them searchable but not easily. For example, IRC servers […]
Announcing New Cloud Security Offering within the Censys ASM Platform
“[On the cloud] what data lives where becomes a slightly different problem … the barrier to entry is so low. It is easy to spin up an instance or a windows VM in Azure … and it is important to have some visibility and governance, so you provide accountability for those things, relative to what […]