4 ms·
I'm not a security expert, can someone explain to me how this product is used and why it's worth $1000 a month (or even more)? What's the alternative?
by matte_black 9y ago
I'm not a security expert, can someone explain to me how this product is used and why it's worth $1000 a month (or even more)? What's the alternative?
- gravypod 9y agoYou can likely take every public IP your organization has, run it through that, and see what your attack surface looks like. Very useful if you have an unmanageable and public computer network.
- cm2187 9y agoIsn't that something nmap does for free?
- gravypod 9y agoNot for wan which is where most commercial firewalls will do their magic. To do this on wan you need to run zmap which is considered mean.
- ngharo 9y agoHuh. nmap cares not about wan vs lan.
- tastythrowaway 9y agoYou're correct, but i think it's that zmap scans way, way faster than nmap
- fredsted 9y agoThere's no problem running nmap on WAN
- matte_black 9y agoSo is this product overvalued?
- fredsted 9y agoCensys? Probably not. It depends how much you value having the data provided in an easily digestible and searchable form that's hopefully updated often. On the other hand, if you have a small subnet, say, less than a /24, you might as well just nmap it yourself, and then you're also guaranteed to have the latest possible scan.
- tokenizerrr 9y agoRunning software against my own IP space is considered mean?
- excalibur 9y agoMaybe it's hush money.
- strictnein 9y agoShodan.io is the alternative. Kind of the biggest player in this field.
- fulafel 9y agoQuoting the web page: "Enterprises use Censys to understand their network attack surfaces. CERTs and security researchers use it to discover new threats and assess their global impact." The details depend on how much the of advertised scan data enrichment they do, but you might for example ask how many vulnerable cable modems of a certain model there are in the network you are responsible for, and what ISP networks they are on.