External attack surface management, with Censys

• Subsidiaries, acquisitions and regional entities running their own domains and address ranges
• Cloud services set up outside central IT
• Remote-access and administration services left reachable after a project ends
• Industrial and building systems exposed to the internet without anyone intending it
• Suppliers and third parties whose exposure becomes your risk
• National and sector monitoring, where a CERT or regulator needs to see the exposure of a whole country or sector

• Discover what belongs to you

  Starting from what you already know, such as domains and address ranges, Censys attack surface management finds the related internet-facing assets that were never on your list.

• Monitor continuously

  The external attack surface is watched over time rather than assessed once, so new exposure is picked up as it appears.

• See it as an attacker would

  Censys's map of the internet covers hosts, ports and services, certificates, web properties and DNS: the same view an attacker builds before choosing a target.

• Investigate threats

  The same data supports threat hunting and incident response: tracking attacker infrastructure, uncovering related assets and speeding up investigations.

• Find exposed industrial systems

  Censys identifies industrial systems, shadow OT and remote-access services that are reachable from the internet.

1. Agree scope and success criteria

   With the reseller partner, you decide which organisations, brands or entities to include and what the evaluation needs to show. For a third-party assessment, that includes the suppliers in scope.

2. Provide starting points

   You supply what you already know, such as domains and known address ranges. Nothing is installed inside your network.

3. Review what was found

   Together we go through the assets discovered, the exposures identified and the ones you did not know about.

4. Decide on next steps

   Licensing is arranged through the reseller partner, who also scopes the work to close what was found.

• If you are an end user

  Tell us where you operate and what you need to find out. We will connect you with a reseller partner in your market to arrange an evaluation, purchase and implementation. If you already work with a reseller, tell us who, and we will work through them.

• If you are a reseller

  If you want to offer Censys to your customers, we work with up to three partners per vendor in each country and support each one with training, engineering shadowing and technical support on proofs of value.

What to include

• The country or countries you operate in
• Your organisation and sector
• The domains, brands or entities that should be in scope (no need to send address lists yet)
• Whether suppliers or third parties are in scope
• What prompted the question: an audit, an incident, an acquisition, or simply not knowing
• Your reseller, if you already have one

• Asset discovery and visibility, with runZero: what is connected inside the network, managed and unmanaged.
• Microsegmentation and containment, with Zero Networks: limiting what can move once an attacker is inside.
• Exposure assessment: the outside-in and inside views together, with containment for what cannot be fixed quickly.
• Current engagements: where we are working, by problem, organisation type and stage.