ScanSearch is an on-demand internet scanner — different from indexed search engines like Shodan and Censys. Instead of querying a cached snapshot of the internet, you trigger a real, live SYN + service scan of any target you specify, and ScanSearch runs the scan now and returns the results.
Why it matters: with Shodan or Censys you get whatever was crawled days or weeks ago. With ScanSearch every result is current at the moment you ask.
What you can scan:
Single IPs, CIDRs (any size), or lists of both
Whole countries by ISO code
Domain lists (resolved server side)
Custom CIDR file uploads
What you can collect per scan:
Open ports (SYN scan) — ip:port per host
Service identification — name, protocol, banner, product, vendor, version, CPE, confidence
TLS / certificate data — version, cipher, issuer, subject, SANs, expiry, SHA-256, JARM and JA3S fingerprints
HTTP — title, server header, status, full headers, body hash, favicon hash, redirect chain, robots.txt, security.txt
OS detection (vendor + family), SSH fingerprint + HASSH, SMB hostname/domain/OS
Reverse DNS, DNS records (MX/NS/TXT, SPF/DMARC/DKIM presence)
RDAP / WHOIS — netname, abuse email, org, registration date, allocated CIDR
GeoIP — country/city/region, lat/lng, ASN + org, timezone, continent
Threat intel — threat type/score, WAF detection, honeypot score, taxonomy tags
CVE matching — CVE IDs, count, max CVSS for fingerprinted versions
Certificate Transparency — CT-derived domain list per cert
Industrial / IoT — MQTT auth mode, Modbus device + unit ID, BACnet device
Cloud provider detection
Subdomain enumeration (subfinder + crt.sh + DNS resolve) for domain targets
Web technology stack (Wappalyzer-style: CMS, frameworks, JS libs, server software)
Free vs paid: free tier is capped at 2 kpps, 1 country per scan, max 5 ports per scan, 3 scans/day, shows the first 1,000 results in the UI and limits downloads to 100 rows — for trying the API. Paid plans unlock 100–10,000 kpps, unlimited targets, full results and full export.
Plus 17 free network tools (port scanner, SSL checker, subdomain finder, CVE lookup, ASN lookup, ...) and an official Python SDK + CLI (pip install scansearch).
Linear pricing from $30/mo, free tier available, crypto checkout (Coingate) supported — useful for global users whose cards are blocked by Stripe.