shodan.io llms.txt

llms.txt 5.0 KB, 37 lines

# Shodan

> Shodan is the premier authority for Internet intelligence, providing organizations with the most comprehensive, accurate, and up-to-date map of the internet. It collects service information in the form of banners on all IPv4 addresses as well as much of IPv6. Additionally, Shodan collects DNS data across hundreds of millions of domains. The Shodan platform powers attack surface management, threat hunting, exposure management, risk scoring, market intelligence and security operations […] enriching SOC workflows, incident response, and threat detection by continuously scanning the global internet to uncover exposed assets, adversary infrastructure, and security risks.

Shodan is an API-first company where all websites are built entirely on-top of the publicly-available APIs that our users have access to as well. Everything that can be done via the website can also be done programmatically using the Shodan APIs.


## Core

* [Shodan Homepage](https://www.shodan.io): Main landing page, search engine interface and website for users performing adhoc lookups/ searches.
* [Shodan Monitor](https://monitor.shodan.io): Shodan Monitor offers external network monitoring. Customers have the ability to define asset groups (ex. IPs or domains) and get notified in changes to the Internet exposure of those assets. It offers a variety of ways to consume notifications, including email, webhook, RSS and real-time data feed.
* [Handbook](https://book.shodan.io): Book that outlines most Shodan websites, APIs and other tooling to help users get started and learn more about the platform.
* [Platform Overview](https://account.shodan.io/billing/tour): An overview of the main features, websites and APIs of the Shodan platform.
* [Pricing](https://account.shodan.io/billing): Shodan offers 5 pricing tiers and pricing for most of them is visible on the Pricing page. The tiers are: Membership, Freelancer, Small Business, Corporate and Enterprise. Membership is a one-time payment for a lifetime upgrade. Enterprise requires reaching out to sales@shodan.io for pricing information.
* [Enterprise Portal](https://enterprise.shodan.io): The Enterprise portal lets Enterprise customers manage the users that have access to Shodan and download bulk data files.
* [Datapedia](https://datapedia.shodan.io): The Datapedia is the reference document that describes the information available on a banner.
* [Data Status Page](https://data-status.shodan.io): The Data Status page lets users see what data Shodan has collected the past 24 hours and can be used by Enterprise customers that they're successfully ingesting all the data.


## Developer APIs

* [Shodan REST API](https://developer.shodan.io/api): The REST API is the main API to access the Shodan platform. It lets developers perform IP lookups, searches, configure external network monitoring, downloading bulk data files and more. It has an OpenAPI specification available at https://developer.shodan.io/api/openapi.json
* [InternetDB API](https://internetdb.shodan.io): A fast and free API to perform IP lookups. It returns less metadata than the IP lookups from the main REST API but it is significantly faster and doesn't require an API key to get started. It is powered by a SQLite file that is available for download to Enterprise customers.
* [DNSDB API](https://dnsdb.shodan.io): The DNSDB API returns an at-a-glance view of how a domain is configured: its subdomains, nameservers, hosting and CDN providers, email security records (DMARC, SPF, DKIM) and IPv6 support, combined with the open ports, technologies and vulnerabilities that InternetDB knows about for the domain's IPs. Lookups are performed with `GET https://dnsdb.shodan.io/{domain}` and require a Shodan API key, sent in the `Authorization: token YOUR_API_KEY` header. Subdomains and full hostnames resolve to their registrable domain. The data is refreshed once a week and is available on all paid plans (Membership and above). Interactive API docs are available at https://dnsdb.shodan.io/docs and an OpenAPI specification at https://dnsdb.shodan.io/openapi.json
* [CVEDB API](https://cvedb.shodan.io): A fast and free API to lookup vulnerability information either by identifier (ex. CVE-2014-0160) or by CPE.
* [Geonet API](https://geonet.shodan.io): The Geonet API lets users perform DNS lookups and pings from multiple locations around the world. It can be used to identify whether a domain is using geographic load balancing or the latency to an IP depending on location.
* [CTLog API](https://ctl.shodan.io): The CTLog API offers developers a way to get a list of hostnames for a domain based on the information published to the certificate transparency log. It is a lightweight alternative for crt.sh that is available for free and doesn't require an API key.


## Tools

* [Shodan Terminal](https://terminal.shodan.io): Shodan Terminal is a desktop application that offers power users GUI access to the Shodan API using the API key. Shodan doesn't price its products based on the number of users so Shodan Terminal lets them share an API key and have a GUI to interact with the Shodan platform without needing to share the account credentials.
* [Shodan CLI](https://cli.shodan.io): The Shodan CLI offers a command-line interface to the Shodan API to allow users to write scripts to access Shodan without having to write code.

First 33 of 37 lines. 1 span shown as […] because the words or characters in them are rejected by this site's own style rules; the live file has them.