# Censys Documentation Documentation > The Censys documentation site contains information about how to use the Censys Platform, Platform APIs, Attack Surface Management, Legacy Search, and Data Downloads. ## Documentation: Product Information and Updates - [Internet Scanning](https://docs.censys.com/docs/internet-scanning.md) - [Scanning FAQs](https://docs.censys.com/docs/scanning-faq.md) - [Release Notes](https://docs.censys.com/docs/release-notes.md) - [Research Access to Censys Data](https://docs.censys.com/docs/research-access-to-censys-data.md) - [Opt Out of Data Collection](https://docs.censys.com/docs/opt-out-of-data-collection.md) - [Policy for Enhancement Requests](https://docs.censys.com/docs/policy-for-enhancement-requests.md) - [Policy for Sharing Censys Rapid Response Queries](https://docs.censys.com/docs/policy-for-sharing-censys-rapid-response-queries.md) ## Documentation: Platform - [Get Started with the Censys Platform](https://docs.censys.com/docs/get-started-platform.md) - [Quick Start Guide](https://docs.censys.com/docs/platform-quickstart-guide.md) - [The Censys Platform in 799 Words](https://docs.censys.com/docs/the-censys-platform-under-800-words.md) - [Feature and Data Access Tiers](https://docs.censys.com/docs/data-access-tiers-entitlements.md) - [Report Builder](https://docs.censys.com/docs/platform-report-builder.md) - [Transition to Censys Platform from Legacy Search](https://docs.censys.com/docs/transition-to-censys-platform.md) - [Platform Transition Guide for Legacy Search Enterprise Customers](https://docs.censys.com/docs/platform-transition-guide-enterprise.md) - [Transition Guides for Free Users, Solo, and Teams Subscribers](https://docs.censys.com/docs/transition-guides-for-free-solo-and-teams-subscribers.md) - [Platform API Transition Guide](https://docs.censys.com/docs/platform-api-transition-guide.md) - [Dataset Differences: Censys Platform vs. Legacy Search](https://docs.censys.com/docs/dataset-differences-legacy-search-censys-platform.md) - [Censys Platform Syntax Differences](https://docs.censys.com/docs/censys-platform-syntax-differences.md) - [Query Converter](https://docs.censys.com/docs/query-converter.md) - [Active DNS](https://docs.censys.com/docs/platform-active-dns.md) - Administration - [Add and Remove Users](https://docs.censys.com/docs/platform-org-management.md) - [AI Feature and Privacy Settings](https://docs.censys.com/docs/platform-privacy-ai-settings.md) - [Audit Log](https://docs.censys.com/docs/platform-audit-log.md) - [Connected Applications](https://docs.censys.com/docs/platform-connected-applications.md) - [Delete Your Account ](https://docs.censys.com/docs/platform-delete-account.md) - [Multi-factor Authentication](https://docs.censys.com/docs/platform-mfa.md) - [Organization Switcher](https://docs.censys.com/docs/platform-organization-switcher.md) - [Role-based Access Control](https://docs.censys.com/docs/role-based-access-control.md) - [SAML Authentication](https://docs.censys.com/docs/platform-authentication.md) - [Service Accounts](https://docs.censys.com/docs/platform-service-accounts.md) - [SCIM Configuration](https://docs.censys.com/docs/scim-configuration.md): Setup SAML/SCIM in OKTA IDP for the Censys Platform - [Adversary Investigation](https://docs.censys.com/docs/platform-threat-hunting.md) - [Adversary Investigation MCP Server](https://docs.censys.com/docs/platform-threat-hunting-mcp-server.md) - [AI Investigations](https://docs.censys.com/docs/platform-ai-investigations.md) - [CensEye](https://docs.censys.com/docs/platform-threat-hunting-use-censeye-to-build-detections.md) - [Certificate History](https://docs.censys.com/docs/platform-threat-hunting-use-cert-history-to-build-better-detections.md) - [Investigation Manager](https://docs.censys.com/docs/platform-investigation-manager.md) - [Live Discovery](https://docs.censys.com/docs/platform-threat-hunting-use-live-scan-and-rescan-to-validate-infrastructure.md) - [Open Directory Data and Threats](https://docs.censys.com/docs/platform-open-directory-data-threats.md) - [Threat Data](https://docs.censys.com/docs/platform-threat-hunting-threat-hunting-dataset.md) - [Tracked Threats](https://docs.censys.com/docs/platform-explore-threats.md) - [AI Skills](https://docs.censys.com/docs/platform-ai-skills.md) - [Browser Extension](https://docs.censys.com/docs/platform-browser-extension.md) - [Censys Assistant](https://docs.censys.com/docs/platform-censys-assistant.md) - [Censys Credits ](https://docs.censys.com/docs/censys-credits.md) - [Credits for Enterprise Organizations](https://docs.censys.com/docs/platform-credits-enterprise.md) - [Credits for Free and Starter Users](https://docs.censys.com/docs/platform-credits-free-starter.md) - [Manage and Monitor Censys Credits](https://docs.censys.com/docs/manage-and-monitor-censys-credits.md) - [Censys Query Language](https://docs.censys.com/docs/censys-query-language.md) - [Query Assistant](https://docs.censys.com/docs/platform-query-assistant.md) - [Relative Time in CenQL](https://docs.censys.com/docs/use-relative-time-in-queries.md) - [Regex in CenQL](https://docs.censys.com/docs/platform-regex-cenql.md) - [Collections](https://docs.censys.com/docs/platform-collections.md) - [Create, Delete, or Archive a Collection](https://docs.censys.com/docs/platform-create-a-collection.md) - [Collection Email Notifications](https://docs.censys.com/docs/platform-collection-emails.md) - [Collection Webhooks](https://docs.censys.com/docs/platform-collections-webhooks.md) - [Slack Collection Webhooks](https://docs.censys.com/docs/platform-collections-configure-webhooks-for-slack.md) - [Share a Collection](https://docs.censys.com/docs/platform-share-collection.md) - [Track and Monitor Collections](https://docs.censys.com/docs/platform-manage-and-monitor-collections.md) - [Troubleshooting Collection Issues](https://docs.censys.com/docs/platform-troubleshoot-collections.md) - [Critical Infrastructure](https://docs.censys.com/docs/platform-ics-protocols.md) - [Host Enrichment API](https://docs.censys.com/docs/host-enrichment.md) - [Host Reputation](https://docs.censys.com/docs/platform-reputation-scores.md) - [Live Rescan](https://docs.censys.com/docs/platform-live-rescan.md) - [Platform API and SDKs](https://docs.censys.com/docs/platform-api.md) - [Platform CLI Tool](https://docs.censys.com/docs/platform-cli.md) - [Platform Data](https://docs.censys.com/docs/platform-datasets.md) - [Platform Application and Endpoint Data](https://docs.censys.com/docs/platform-application-endpoint-data.md) - [Platform Certificate Dataset](https://docs.censys.com/docs/platform-certificate-dataset.md) - [Platform Historical Data](https://docs.censys.com/docs/platform-historical-data.md) - [Platform Host Dataset](https://docs.censys.com/docs/platform-host-dataset.md) - [Platform JARM Fingerprints and Context Hashes](https://docs.censys.com/docs/platform-jarm-fingerprints.md) - [Platform Web Property Dataset](https://docs.censys.com/docs/platform-web-property-dataset.md) - [Platform FAQs](https://docs.censys.com/docs/censys-platform-faq.md) - [Platform Integrations](https://docs.censys.com/docs/platform-integrations.md) - [Elasticsearch Kibana Integration](https://docs.censys.com/docs/platform-kibana-integration.md) - [Google SecOps SOAR Integration](https://docs.censys.com/docs/platform-google-secops-integration.md) - [Microsoft Sentinel Integration](https://docs.censys.com/docs/platform-microsoft-sentinel-integration.md) - [Palo Alto Cortex XSOAR/XSIAM Integration](https://docs.censys.com/docs/platform-palo-alto-cortex-xsoar-integration.md) - [SentinelOne Integration](https://docs.censys.com/docs/platform-sentinelone-integration.md) - [ServiceNow TISC Integration](https://docs.censys.com/docs/platform-servicenow-tisc-integration.md) - [Splunk Platform Integration](https://docs.censys.com/docs/platform-splunk-siem-integration.md) - [Splunk SOAR Integration](https://docs.censys.com/docs/platform-splunk-soar-integration.md) - [Platform MCP Server](https://docs.censys.com/docs/platform-mcp-server.md) - [Tags and Comments](https://docs.censys.com/docs/platform-tags-comments.md) - [Third-party Data Context](https://docs.censys.com/docs/platform-enrichment.md) - [Web Screenshots](https://docs.censys.com/docs/platform-web-screenshots.md) ## Documentation: Attack Surface Management - [Get Started with Censys ASM](https://docs.censys.com/docs/asm-get-started.md) - [Quick Start Guide](https://docs.censys.com/docs/asm-quick-start-guide.md) - [ASM Overview Dashboard](https://docs.censys.com/docs/asm-dashboard.md) - [Trends & Benchmarks](https://docs.censys.com/docs/asm-trends-benchmarks.md) - [Ports & Protocols](https://docs.censys.com/docs/asm-ports-protocols-dashboard.md) - [Metrics](https://docs.censys.com/docs/asm-metrics.md) - [Reports](https://docs.censys.com/docs/asm-reports.md) - [Seed Your Attack Surface](https://docs.censys.com/docs/asm-seed-your-attack-surface.md) - [Use Censys to Find Seeds](https://docs.censys.com/docs/asm-use-censys-to-find-seeds.md) - [Understand and Investigate Your Attack Surface](https://docs.censys.com/docs/asm-understand-investigate-attack-surface.md) - [Build, Save, and Automate ASM Queries](https://docs.censys.com/docs/asm-build-save-automate-queries.md) - [Example ASM Queries](https://docs.censys.com/docs/asm-example-queries.md) - [ASM Workspaces and User Access ](https://docs.censys.com/docs/asm-workspaces-user-access.md) - [ASM Activity Logbook](https://docs.censys.com/docs/asm-logbook.md) - [Logbook REST API Event Catalog](https://docs.censys.com/docs/asm-logbook-event-catalog-api.md) - [ASM API](https://docs.censys.com/docs/asm-api.md) - [Inventory Aggregation API](https://docs.censys.com/docs/asm-inventory-aggregation-api.md) - [ASM Integrations](https://docs.censys.com/docs/asm-integrations.md) - [Cloud Connectors](https://docs.censys.com/docs/asm-cloud-connectors.md) - [AWS Hosted Cloud Connector](https://docs.censys.com/docs/asm-aws-cloud-connector.md) - [Azure Hosted Cloud Connector](https://docs.censys.com/docs/asm-azure-cloud-connector.md) - [GCP Hosted Cloud Connector](https://docs.censys.com/docs/asm-gcp-cloud-connector.md) - [Atlassian Jira ASM Integration](https://docs.censys.com/docs/asm-atlassian-jira.md) - [Cisco Webex Teams ASM Integration](https://docs.censys.com/docs/asm-cisco-webex-teams.md) - [Google Security Operations ASM Integration](https://docs.censys.com/docs/asm-google-secops.md) - [Microsoft Sentinel ASM Integration](https://docs.censys.com/docs/asm-microsoft-sentinel.md) - [Microsoft Teams ASM Integration](https://docs.censys.com/docs/asm-microsoft-teams.md) - [Qualys VMDR ASM Integration](https://docs.censys.com/docs/asm-qualys-vmdr.md) - [Rapid Response Email Notifications for ASM](https://docs.censys.com/docs/asm-rapid-response-email-notifications.md) - [Risk Email Notifications for ASM](https://docs.censys.com/docs/asm-email-notifications.md) - [ServiceNow CMDB ASM Integration](https://docs.censys.com/docs/asm-servicenow-cmdb.md) - [ServiceNow ITSM ASM Integration](https://docs.censys.com/docs/asm-servicenow-itsm.md) - [ServiceNow VR ASM Integration](https://docs.censys.com/docs/asm-servicenow-vr.md) - [Slack ASM Integration](https://docs.censys.com/docs/asm-slack.md) - [Splunk ASM Integration](https://docs.censys.com/docs/asm-splunk.md) - [Tenable Vulnerability Management ASM Integration](https://docs.censys.com/docs/asm-tenable-vm.md) - [Webhooks for ASM](https://docs.censys.com/docs/asm-webhook.md) - [Wiz ASM Integration](https://docs.censys.com/docs/asm-wiz.md) - [ASM MCP Server](https://docs.censys.com/docs/asm-mcp-server.md) - [Censys Assistant in ASM](https://docs.censys.com/docs/asm-censys-assistant.md) - [Insights](https://docs.censys.com/docs/asm-insights.md) - [Inventory Assets](https://docs.censys.com/docs/asm-inventory-assets.md) - [Cloud Asset Context](https://docs.censys.com/docs/asm-cloud-asset-context.md) - [Guide: Activate Cloud Asset Context in ASM](https://docs.censys.com/docs/asm-activate-cloud-asset-context.md) - [Certificates](https://docs.censys.com/docs/asm-certificate-assets.md) - [Certificate Data Definitions (ASM)](https://docs.censys.com/docs/asm-certificate-data-definitions.md) - [Domains](https://docs.censys.com/docs/asm-domain-assets.md) - [Domain Data Definitions (ASM)](https://docs.censys.com/docs/asm-domain-data-definitions.md) - [Exclude Assets](https://docs.censys.com/docs/asm-exclude-assets.md) - [Hosts](https://docs.censys.com/docs/asm-host-assets.md) - [Host Data Definitions (ASM)](https://docs.censys.com/docs/asm-host-data-definitions.md) - [Storage Buckets](https://docs.censys.com/docs/asm-storage-bucket-assets.md) - [Storage Bucket Data Definitions (ASM)](https://docs.censys.com/docs/asm-storage-bucket-data-definitions.md) - [Web Entities](https://docs.censys.com/docs/asm-web-entity-assets.md) - [Web Entity Data Definitions (ASM)](https://docs.censys.com/docs/asm-web-entity-data-definitions.md) - [Risks](https://docs.censys.com/docs/asm-risks.md) - [Configure Risks](https://docs.censys.com/docs/asm-configure-risks.md) - [CVE Risks](https://docs.censys.com/docs/asm-cve-risks.md) - [CVE Risks FAQ](https://docs.censys.com/docs/asm-cve-risks-faq.md) - [Dangling DNS Risks](https://docs.censys.com/docs/asm-dangling-dns-risks.md) - [Risk Categories](https://docs.censys.com/docs/asm-risk-categories.md) - [Shrink Your Attack Surface](https://docs.censys.com/docs/shrink-your-attack-surface.md) - [Secure Subsidiaries, Acquisitions, and Mergers](https://docs.censys.com/docs/asm-secure-subsidiaries-acquisitions-and-mergers.md) - [Eliminate Shadow IT](https://docs.censys.com/docs/asm-eliminate-shadow-it.md) - [Identify Unsanctioned Cloud Usage ](https://docs.censys.com/docs/asm-identify-unsanctioned-cloud-usage.md) ## Documentation: Legacy Search - [Get Started](https://docs.censys.com/docs/ls-get-started.md) - [Quick Start](https://docs.censys.com/docs/ls-quick-start.md) - [Introductory Use Cases](https://docs.censys.com/docs/ls-introductory-use-cases.md) - [Export Search Results](https://docs.censys.com/docs/ls-export-results.md) - [Censys Search Language](https://docs.censys.com/docs/ls-csl.md) - [Regular Expression (Regex) in Legacy Search](https://docs.censys.com/docs/ls-regex.md) - [Advanced Legacy Search Methods and Queries](https://docs.censys.com/docs/ls-advanced-methods-queries.md) - [Legacy Search and CSL FAQs](https://docs.censys.com/docs/ls-csl-faqs.md) - [Legacy Search Datasets](https://docs.censys.com/docs/ls-datasets-folder.md) - [Hosts](https://docs.censys.com/docs/ls-hosts.md) - [Virtual Hosts](https://docs.censys.com/docs/ls-intro-virtual-hosts.md) - [Autonomous System](https://docs.censys.com/docs/ls-host-autonomous-system.md) - [C2 Label](https://docs.censys.com/docs/ls-c2-label.md) - [DNS](https://docs.censys.com/docs/ls-dns.md) - [JARM](https://docs.censys.com/docs/ls-jarm.md) - [Labels](https://docs.censys.com/docs/ls-labels.md) - [Location](https://docs.censys.com/docs/ls-host-location.md) - [Operating System](https://docs.censys.com/docs/ls-host-os.md) - [Service Information](https://docs.censys.com/docs/ls-service-information.md) - [Software](https://docs.censys.com/docs/ls-software.md) - [TLS](https://docs.censys.com/docs/ls-tls.md) - [WHOIS](https://docs.censys.com/docs/ls-whois.md) - [Certificates](https://docs.censys.com/docs/ls-certificates.md) - [Certificate Transparency and Precertificates](https://docs.censys.com/docs/ls-ct-precerts.md) - [Lite Certificates](https://docs.censys.com/docs/ls-lite-certificates.md) - [CVE Context](https://docs.censys.com/docs/ls-cve-context.md) - [Legacy Search Administration and Authentication](https://docs.censys.com/docs/ls-identity-access.md) - [Manage a Team](https://docs.censys.com/docs/ls-manage-a-team.md) - [View Your Quota](https://docs.censys.com/docs/ls-view-quota.md) - [Enable and Configure SAML](https://docs.censys.com/docs/ls-saml-sso.md) - [Microsoft AD FS SSO](https://docs.censys.com/docs/ls-ms-ad-fs-sso.md) - [Azure Active Directory SSO](https://docs.censys.com/docs/ls-aad-sso.md) - [Okta SSO](https://docs.censys.com/docs/ls-okta-sso.md) - [Ping Identity SSO](https://docs.censys.com/docs/ls-ping-identity-sso.md) - [Delete Account or Cancel Subscription](https://docs.censys.com/docs/ls-delete-account-cancel-subscription.md) - [Legacy Search Video Walkthroughs](https://docs.censys.com/docs/ls-video-walkthroughs.md) - [Find Malicious Infrastructure Assets](https://docs.censys.com/docs/ls-find-malicious-infrastructure-video.md) - [Vendor Compliance](https://docs.censys.com/docs/ls-vendor-compliance-video.md) - [Monitor SSL TLS Certs](https://docs.censys.com/docs/ls-monitor-ssl-tls-certs-video.md) - [Find Rogue Assets](https://docs.censys.com/docs/ls-find-rogue-assets-video.md) - [Legacy Search API](https://docs.censys.com/docs/ls-api.md) ## Documentation: ASM and Legacy Search Developer Resources - [Legacy Search and ASM Python CLI](https://docs.censys.com/docs/search-and-asm-python-cli.md) - [Censeye Automated Threat Hunting Tool](https://docs.censys.com/docs/censeye-automated-threat-hunting-tool.md) - [Legacy Search Integrations](https://docs.censys.com/docs/ls-integrations.md) ## Documentation: Data Downloads - [Platform Data Downloads](https://docs.censys.com/docs/platform-data-downloads.md) - [Download Censys Universal Internet Dataset](https://docs.censys.com/docs/ls-download-censys-universal-internet-dataset.md) - [Download Certs 2.0 Data](https://docs.censys.com/docs/ls-download-certs-2-data.md) ## API Reference: Censys Platform API - [Get Started with Censys APIs](https://docs.censys.com/reference/get-started.md) - Account Management - [Get Free user credit balance](https://docs.censys.com/reference/v3-accountmanagement-user-credits.md): Retrieve your Free user account credit balance and refresh information. To retrieve the credit balance for a Starter or Enterprise account, use the [get organization credit balance… - [Get Free user credit usage](https://docs.censys.com/reference/v3-accountmanagement-user-credits-usage.md): Retrieve your Free user account credit consumption information over a specific date range. You must include a start date in your request.

This endpoint does not cost any credits to execute. - [Get organization user credit usage](https://docs.censys.com/reference/v3-accountmanagement-member-credits-usage.md): Retrieve credit consumption information for a user in an organization over a specific date range. You must include a start date in your request.

This endpoint does not cost any credits to… - [Get organization details](https://docs.censys.com/reference/v3-accountmanagement-org-details.md): Retrieve an organization's details, including the count of users broken down by [Platform-wide role](https://docs.censys.com/docs/role-based-access-control#platform-wide-roles) and organization… - [Get organization credit balance](https://docs.censys.com/reference/v3-accountmanagement-org-credits.md): Retrieve credit balance and expiration information for an organization.

Credits expire 12 months after they are acquired.

This endpoint does not cost any credits to execute. - [Get organization credit usage](https://docs.censys.com/reference/v3-accountmanagement-org-credits-usage.md): Retrieve credit information for an organization over a specific date range. You must include a start date in your request.

Users with the Platform Admin role can obtain credit usage… - [Invite user to organization](https://docs.censys.com/reference/v3-accountmanagement-invite-user-to-org.md): Invite a user to an organization. The user will receive an email to join the organization. This is equivalent to [adding a new user via the… - [List audit log events](https://docs.censys.com/reference/v3-accountmanagement-org-audit-log-events.md): Retrieve audit log events for an organization. Use query parameters to filter events by time range, user, and event type.

This endpoint does not cost any credits to execute. - [List organization users](https://docs.censys.com/reference/v3-accountmanagement-list-org-members.md): Retrieve a paginated list of an organization's users and their details, including their user ID, email, name, creation time, [Platform-wide… - [Remove user from organization](https://docs.censys.com/reference/v3-accountmanagement-remove-org-member.md): Remove a user from an organization. This is equivalent to [removing a user via the UI](https://docs.censys.com/docs/platform-org-management#remove-members).

Only users with the Platform Admin… - [Update a user's Platform-wide roles in an organization](https://docs.censys.com/reference/v3-accountmanagement-update-org-member.md): Update the [Platform-wide roles](https://docs.censys.com/docs/role-based-access-control#platform-wide-roles) assigned to a user in an organization. This operation replaces a user's Platform-wide… - [Remove a user's module access](https://docs.censys.com/reference/v3-accountmanagement-remove-member-module.md): Remove a user's access to the specified module. Only users with the Platform Admin role in the organization can perform this operation. This endpoint does not cost any credits to execute. - [Set a user's module role](https://docs.censys.com/reference/v3-accountmanagement-set-member-module-role.md): Assign a [module role](https://docs.censys.com/docs/role-based-access-control#module-roles) to a user in an organization or replace their existing role in that module. Only users with the Platform… - Collections - [Aggregate results for a search query within a collection](https://docs.censys.com/reference/v3-collections-search-aggregate.md): Aggregate results for a Platform search query that targets a collection's assets. This functionality is equivalent to the [Report Builder](https://docs.censys.com/docs/platform-report-builder#/) in… - [Create a collection](https://docs.censys.com/reference/v3-collections-crud-create.md): Create a new collection.

This endpoint does not cost credits to execute. - [Delete a collection](https://docs.censys.com/reference/v3-collections-crud-delete.md): Delete a collection.

This endpoint does not cost credits to execute. - [Get a collection](https://docs.censys.com/reference/v3-collections-crud-get.md): Retrieve information about a collection. Retrieved information includes its name, query, description, status, and asset count.

This endpoint does not cost credits to execute. - [Get a collection's events](https://docs.censys.com/reference/v3-collections-list-events.md): Retrieve the event history for a collection. This includes the addition or removal of assets as well as collection status changes.

This endpoint does not cost credits to execute. - [List collections](https://docs.censys.com/reference/v3-collections-crud-list.md): List all collections for an organization. Retrieved information includes collection ID, name, query, description, status, and asset count.

This endpoint does not cost credits to execute. - [Run a search query within a collection](https://docs.censys.com/reference/v3-collections-search-query.md): Run a search query across a collection's assets. Reference the [documentation on Censys Query Language](https://docs.censys.com/docs/censys-query-language#/) for information about query syntax. Host… - [Update a collection](https://docs.censys.com/reference/v3-collections-crud-update.md): Update a collection's name, description, and/or query.

This endpoint does not cost credits to execute. - Global Data - [Aggregate results for a search query](https://docs.censys.com/reference/v3-globaldata-search-aggregate.md): Aggregate results for a Platform search query. This functionality is equivalent to the [Report Builder](https://docs.censys.com/docs/platform-report-builder#/) in the Platform web UI. - [Convert Legacy Search queries to Platform queries](https://docs.censys.com/reference/v3-globaldata-search-convert.md): Convert Censys Search Language queries used in Legacy Search into Censys Query Language (CenQL) queries for use in the Platform.

Reference the [documentation on… - [Get a certificate](https://docs.censys.com/reference/v3-globaldata-asset-certificate.md): Retrieve information about a single certificate. A certificate ID is its SHA-256 fingerprint in the Censys dataset. - [Get a certificate in PEM format](https://docs.censys.com/reference/v3-globaldata-asset-certificate-raw.md): Retrieve the raw PEM-encoded format of a certificate. A certificate ID is its SHA-256 fingerprint in the Censys dataset. - [Get a host](https://docs.censys.com/reference/v3-globaldata-asset-host.md): Retrieve information about a single host. A host ID is its IP address. - [Get a web property](https://docs.censys.com/reference/v3-globaldata-asset-webproperty.md): Retrieve information about a single web property. Web properties are identified using a combination of a hostname and port joined with a colon, such as `platform.censys.io:80`. - [Get DNS names that resolved to an IP (aggregated bounds)](https://docs.censys.com/reference/v3-globaldata-dns-ip-resolution-bound.md): Retrieve the domain names that resolved to an IP during a time frame. You can narrow results with `record_types` (A or AAAA).

Results are aggregated per domain name and multiple distinct… - [Get DNS names that resolved to an IP (ranges)](https://docs.censys.com/reference/v3-globaldata-dns-ip-resolution-ranges.md): Retrieve the domain names that resolved to an IP during a time frame. You can narrow results with `record_types` (A or AAAA).

Record results are broken down based on time range. For example,… - [Get DNS resolution records for a name (aggregated bounds)](https://docs.censys.com/reference/v3-globaldata-dns-name-resolution-bound.md): Retrieve the DNS resolution records for a name. This endpoint returns observed A, AAAA, MX, NS, SOA, and TXT records for the name you provide. You can filter by one or more record types using… - [Get DNS resolution records for a name (ranges)](https://docs.censys.com/reference/v3-globaldata-dns-name-resolution-ranges.md): Retrieve the records that resolved for a name during a time frame. This endpoint returns observed A, AAAA, MX, NS, SOA, and TXT records for the name you provide. You can filter by one or more record… - [Get host enrichment](https://docs.censys.com/reference/v3-globaldata-asset-host-enrichment.md): Retrieve enrichment data for a single host. This endpoint is optimized for high-volume SOC enrichment use cases.

This endpoint does not consume standard Censys credits. Core organizations may… - [Get host event history](https://docs.censys.com/reference/v3-globaldata-asset-host-timeline.md): Retrieve event history for a host. A host ID is its IP address.

Note that when a service protocol changes after a new scan (for example, from `UNKNOWN` to `NETBIOS`), this information will be… - [Get scan status](https://docs.censys.com/reference/v3-globaldata-scans-get.md): Retrieve the current status of a scan by its ID. This endpoint works for both [Live Discovery scans](https://docs.censys.com/reference/v3-threathunting-scans-discovery#/) and [Live… - [Get service history for a host](https://docs.censys.com/reference/v3-globaldata-service-on-host.md): Retrieve historical service observations for a host. This endpoint returns time ranges during which services were detected on the host.

You can define a specific time frame of interest. If you… - [Live Rescan: Initiate a new rescan](https://docs.censys.com/reference/v3-globaldata-scans-rescan.md): Initiate a rescan for a known host service at a specific IP and port (`ip:port`) or hostname and port (`hostname:port`). This is equivalent to the [Live… - [Retrieve multiple certificates](https://docs.censys.com/reference/v3-globaldata-asset-certificate-list-post.md): Retrieve information about multiple certificates. You can retrieve up to 1,000 certificates per call. A certificate ID is its SHA-256 fingerprint in the Censys dataset. - [Retrieve multiple certificates](https://docs.censys.com/reference/v3-globaldata-asset-certificate-list.md): Retrieve information about multiple certificates. A certificate ID is its SHA-256 fingerprint in the Censys dataset.

The GET method of this endpoint is deprecated, but will continue to be… - [Retrieve multiple certificates in PEM format](https://docs.censys.com/reference/v3-globaldata-asset-certificate-list-raw-post.md): Retrieve the raw PEM-encoded format for multiple certificates. You can retrieve up to 1,000 certificates per call. A certificate ID is its SHA-256 fingerprint in the Censys dataset. - [Retrieve multiple certificates in PEM format](https://docs.censys.com/reference/v3-globaldata-asset-certificate-list-raw.md): Retrieve the raw PEM-encoded format for multiple certificates. A certificate ID is its SHA-256 fingerprint in the Censys dataset.

The GET method of this endpoint is deprecated, but will… - [Retrieve multiple hosts](https://docs.censys.com/reference/v3-globaldata-asset-host-list-post.md): Retrieve information about multiple hosts. You can retrieve up to 100 hosts per call. A host ID is its IP address. - [Retrieve multiple hosts](https://docs.censys.com/reference/v3-globaldata-asset-host-list.md): Retrieve information about multiple hosts. A host ID is its IP address.

The GET method of this endpoint is deprecated, but will continue to be supported for backwards compatibility. Please use… - [Retrieve multiple web properties](https://docs.censys.com/reference/v3-globaldata-asset-webproperty-list-post.md): Retrieve information about multiple web properties. You can retrieve up to 100 web properties per call. Web properties are identified using a combination of a hostname and port joined with a colon,… - [Retrieve multiple web properties](https://docs.censys.com/reference/v3-globaldata-asset-webproperty-list.md): Retrieve information about multiple web properties. Web properties are identified using a combination of a hostname and port joined with a colon, such as `platform.censys.io:80`.

The GET… - [Run a search query](https://docs.censys.com/reference/v3-globaldata-search-query.md): Run a search query across Censys data. Reference the [documentation on Censys Query Language](https://docs.censys.com/docs/censys-query-language#/) for information about query syntax. Host services… - Supply Chain Intelligence - [Add suppliers to a supply chain](https://docs.censys.com/reference/v1-supply-chain-add-suppliers.md): Add suppliers to your supply chain. Use the [search suppliers endpoint](https://docs.censys.com/reference/v1-supply-chain-search-suppliers#/) to find the IDs of suppliers to add.

This endpoint… - [Aggregate supply chain assets](https://docs.censys.com/reference/v1-supply-chain-aggregate-assets.md): Aggregate assets across your supply chain by a given field. By default, the aggregation covers every supplier in your supply chain. Provide `supplier_ids` to narrow it to specific… - [Get risk instance](https://docs.censys.com/reference/v1-supply-chain-get-risk-instance.md): Retrieve a single risk instance using its `risk_instance_ID` and `supplier_id`. Use the [list risk instances](https://docs.censys.com/reference/v1-supply-chain-list-risk-instances) and [list risk… - [Get supplier](https://docs.censys.com/reference/v1-supply-chain-get-supplier.md): Retrieve information about a supplier in your supply chain.

This endpoint does not cost credits to execute. - [Get supply chain](https://docs.censys.com/reference/v1-supply-chain-get-supply-chain.md): Retrieve a supply chain for an organization. Most organizations will only have one supply chain ID.

This endpoint does not cost credits to execute. - [List risk events](https://docs.censys.com/reference/v1-supply-chain-list-risk-events.md): Retrieve risk state-transition events (opened, resolved, reopened) for a single supplier. When polling for new events, always pass inserted_after_time, starting from the time the sync begins (or… - [List risk instances](https://docs.censys.com/reference/v1-supply-chain-list-risk-instances.md): Retrieve individual risk instances (one risk type observed on one asset belonging to one supplier) across your supply chain. By default the entire supply chain is searched. Provide `supplier_ids` to… - [List risks](https://docs.censys.com/reference/v1-supply-chain-list-risks.md): Retrieve the risks (vulnerabilities, misconfigurations, and exposures) present in your supply chain. By default the entire supply chain is searched. Provide `supplier_ids` to narrow your search. - [List suppliers](https://docs.censys.com/reference/v1-supply-chain-list-suppliers.md): Retrieve a paginated list of all suppliers in your supply chain.

This endpoint does not cost credits to execute. - [List supply chains](https://docs.censys.com/reference/v1-supply-chain-list-supply-chains.md): Retrieve the supply chain ID, supplier count, and summary for your organization.

This endpoint does not cost credits to execute. - [Remove a supplier from your supply chain](https://docs.censys.com/reference/v1-supply-chain-remove-supplier.md): Remove a supplier from your supply chain.

This endpoint does not cost credits to execute. - [Search suppliers](https://docs.censys.com/reference/v1-supply-chain-search-suppliers.md): Search the list of available suppliers by display name, domain, and legal name keywords and retrieve their information (including `supplier_id`). This endpoint will return a maximum of 25 results and… - [Search supply chain assets](https://docs.censys.com/reference/v1-supply-chain-search-assets.md): Search for assets across your supply chain. By default the search covers every supplier in the supply chai. Provide `supplier_ids` to narrow your search. Reference the [documentation on Censys Query… - Tags and Comments - [Bulk create tag assignments](https://docs.censys.com/reference/v3-tags-bulk-create-assignments.md): Start a long-running operation that assigns a tag to every asset matching a CenQL query. The operation runs asynchronously; use the returned operation to track its progress.

A tag can hold a… - [Bulk delete tag assignments](https://docs.censys.com/reference/v3-tags-bulk-delete-assignments.md): Start a long-running operation that removes a tag from its assigned assets, optionally restricted to a creation-time window. The operation runs asynchronously; use the returned operation to track its… - [Cancel a tag operation](https://docs.censys.com/reference/v3-tags-cancel-operation.md): Request cancellation of an in-progress bulk tag operation. Cancellation is cooperative: the operation finishes the page it is currently processing, then stops. Work already committed before… - [Create a comment](https://docs.censys.com/reference/v3-comments-create-comment.md): Add a comment on an asset in your organization.

This endpoint does not cost any credits to execute. - [Create a tag](https://docs.censys.com/reference/v3-tags-create-tag.md): Create a new tag in your organization. Tags can be used to label and organize assets.

Specify a privacy setting to control visibility: `private` tags are only visible to you and organization… - [Create a tag assignment](https://docs.censys.com/reference/v3-tags-create-assignment.md): Assign a tag to an asset. Tag assignments are only visible to members of your organization, depending on the tag's privacy settings. You must have access to the tag to assign it to an… - [Delete a comment](https://docs.censys.com/reference/v3-comments-delete-comment.md): Delete a comment. Only the comment's creator or an organization admin can delete a comment. This action is permanent and cannot be undone.

This endpoint does not cost any credits to execute. - [Delete a tag](https://docs.censys.com/reference/v3-tags-delete-tag.md): Delete a tag and all of its assignments from your organization. This action is permanent and cannot be undone.

Only the tag's creator or an organization admin can delete a `private` tag. Tags… - [Delete a tag assignment](https://docs.censys.com/reference/v3-tags-delete-assignment.md): Remove a tag assignment from an asset. This action is permanent and cannot be undone. Removing an assignment only detaches the tag from the specified asset; the tag itself is not deleted. Only the… - [Get a tag](https://docs.censys.com/reference/v3-tags-get-tag.md): Retrieve a tag by its ID or name. Tag names are unique within an organization and can be used interchangeably with the tag ID in the path parameter.

Only tags that are visible to the caller… - [Get a tag operation](https://docs.censys.com/reference/v3-tags-get-operation.md): Retrieve a single bulk tag operation by ID, including its current status and progress counts. Use this to poll the status of an operation started by the bulk-create or bulk-delete… - [List comments](https://docs.censys.com/reference/v3-comments-list-comments.md): Retrieve a paginated list of comments in your organization. Use query parameters to filter by asset, creator, or creation time.

This endpoint does not cost any credits to execute. - [List tag assignments](https://docs.censys.com/reference/v3-tags-list-assignments.md): Retrieve a paginated list of assignments for a tag in your organization. Use query parameters to filter results by asset, created_by, or creation time. Only assignments for tags visible to your… - [List tag operations](https://docs.censys.com/reference/v3-tags-list-operations.md): Retrieve a paginated list of bulk tag operations. Provide a tag ID in the path to scope the listing to a single tag, or `-` to list operations across all tags in your organization. Use query… - [List tags](https://docs.censys.com/reference/v3-tags-list-tags.md): Retrieve a paginated list of tags in your organization. Private tags created by other users are not included in the results unless your account is an organization admin.

This endpoint does not… - [Update a tag](https://docs.censys.com/reference/v3-tags-update-tag.md): Update an existing tag in your organization. Only the fields provided in the request body will be updated; omitted fields are left unchanged.

Only the tag's creator or an organization admin… - [Update a comment](https://docs.censys.com/reference/v3-comments-update-comment.md): Update the body of an existing comment. Only the comment's creator can update it.

This endpoint does not cost any credits to execute. - Adversary Investigation - [CensEye: Create a pivot analysis job](https://docs.censys.com/reference/v3-threathunting-censeye-jobs-create.md): Create an asynchronous CensEye pivot analysis job for a host, web property, or certificate. The job extracts [default pivot… - [CensEye: Get job results](https://docs.censys.com/reference/v3-threathunting-censeye-job-results.md): Retrieve the results of a completed CensEye pivot analysis job. Each result contains a count and the field-value pairs that were analyzed. Results may be empty if the job is still… - [CensEye: Get job status](https://docs.censys.com/reference/v3-threathunting-censeye-jobs-get.md): Retrieve the current status of a CensEye pivot analysis job. Use this to poll for completion before fetching results.

To use this endpoint, your organization must have access to the Adversary… - [CensEye: List jobs](https://docs.censys.com/reference/v3-threathunting-censeye-jobs-list.md): List CensEye pivot analysis jobs for the current organization. Results are paginated. Optionally filter by asset (host, web property, or certificate). - [CensEye: Retrieve value counts to discover pivots](https://docs.censys.com/reference/v3-threathunting-value-counts.md): Get counts of web assets for specific field-value pairs and combinations of field-value pairs. This is similar to the [CensEye… - [Get endpoint observation history for a host](https://docs.censys.com/reference/v3-threathunting-endpoint-observations-on-host.md): Retrieve historical endpoint-level hash observations for a host. This action returns time frames during which Censys observed host service endpoint body, favicon, and banner hash values. You must… - [Get fingerprint observation history for a host](https://docs.censys.com/reference/v3-threathunting-fingerprint-observations-on-host.md): Retrieve fingerprint observations for a host. You may optionally include a time range by using `start_time` and `end_time`. If you do not specify a time frame, this endpoint will search the… - [Get host history for a certificate](https://docs.censys.com/reference/v3-threathunting-get-host-observations-with-certificate.md): Retrieve the historical observations of hosts associated with a certificate. This is useful for threat hunting, detection engineering, and timeline generation. Certificate history is also visible to… - [Get scan status](https://docs.censys.com/reference/v3-threathunting-scans-get.md): Retrieve the current status of a scan by its ID. This endpoint works for both [Live Discovery scans](https://docs.censys.com/reference/v3-threathunting-scans-discovery#/) and [Live… - [Get threat history for a host](https://docs.censys.com/reference/v3-threathunting-threats-on-host.md): Retrieve historical threat observations for a host. This endpoint returns time ranges during which threats were detected on the host.

You can define a specific time frame of interest. If you… - [Get threat history for a web property](https://docs.censys.com/reference/v3-threathunting-threats-on-web.md): Retrieve historical threat observations for a web property. This endpoint returns time ranges during which threats were detected on the host.

You can define a specific time frame of interest.… - [Investigations: Create file upload](https://docs.censys.com/reference/v3-threathunting-investigations-files-create.md): Prepare to attach an evidence file to an investigation. This endpoint does not accept the file. It returns a URL to send the file to and an identifier to pass to the [create job… - [Investigations: Create job](https://docs.censys.com/reference/v3-threathunting-investigations-jobs-create.md): Start an [AI investigation](https://docs.censys.com/docs/platform-ai-investigations) from a set of indicators, a set of previously uploaded evidence files, or both. Supply at least one `indicators`… - [Investigations: Get job results](https://docs.censys.com/reference/v3-threathunting-investigations-jobs-results.md): Download the ZIP archive that contains a completed AI investigation's report and evidence. You can only retrieve the job results for an investigation you started. The archive is composed when you… - [Investigations: Get job status](https://docs.censys.com/reference/v3-threathunting-investigations-jobs-get.md): Retrieve the status of one AI investigation. Poll this endpoint until the investigation is completed, then download its report and evidence.

An investigation that does not exist, belongs to… - [Investigations: Get usage](https://docs.censys.com/reference/v3-threathunting-investigations-usage-get.md): Retrieve your organization's investigation limit, current usage, and the number of remaining investigations.

To use this endpoint, your organization must have access to the Adversary… - [Investigations: List jobs](https://docs.censys.com/reference/v3-threathunting-investigations-jobs-list.md): List the AI investigations you have started. The most recent investigations are listed first and only investigations that have not passed their retention period are shown. Results are paginated and… - [List active threats](https://docs.censys.com/reference/v3-threathunting-threats-list.md): Retrieve a list of active threats observed by Censys by aggregating threat IDs across hosts and web properties. Threats are active if their fingerprint has been identified on hosts or web properties… - [Live Discovery: Initiate a new scan](https://docs.censys.com/reference/v3-threathunting-scans-discovery.md): Initiate a scan to look for a currently unobserved service at a specific IP and port (`ip:port`) or hostname and port (`hostname:port`). This is equivalent to the [Live… - [SDKs](https://docs.censys.com/reference/sdks.md) - [Current API Version](https://docs.censys.com/reference/current-api-version.md) ## API Reference: Censys Data Downloads API - [Get Started with Data Downloads](https://docs.censys.com/reference/get-started-downloads.md) - Data Downloads API Endpoints - [Fetch the list of available datasets](https://docs.censys.com/reference/get-datasets.md): Fetch the list of available datasets. - [Fetch the list of snapshots for a dataset](https://docs.censys.com/reference/get-snapshots.md): Fetch the list of snapshots for a dataset. - [Fetch the list of files for a snapshot](https://docs.censys.com/reference/get-files.md): Fetch the list of files for a snapshot. ## Release Notes - [October 13, 2026](https://docs.censys.com/changelog/october-13-2026.md) - [October 8, 2026](https://docs.censys.com/changelog/october-8-2026.md) - [October 5, 2026](https://docs.censys.com/changelog/october-5-2026.md) - [September 28, 2026](https://docs.censys.com/changelog/september-28-2026.md) - [September 21, 2026](https://docs.censys.com/changelog/september-21-2026.md) - [September 14, 2026](https://docs.censys.com/changelog/september-14-2026.md) - [September 8, 2026](https://docs.censys.com/changelog/september-8-2026.md) - [August 31, 2026](https://docs.censys.com/changelog/august-31-2026.md) - [Guide to 2026 ASM Web Scanning Update](https://docs.censys.com/changelog/guide-to-2026-asm-web-scanning-update.md) - [August 24, 2026](https://docs.censys.com/changelog/august-24-2026.md)