Features
Search devices by domain, IP, or custom Shodan query
IP reconnaissance (ports, services, banners)
DNS lookup (A, AAAA, MX, NS records)
CVE and CPE vulnerability intelligence
Service and port discovery
Geolocation data for IP addresses
SSL/TLS certificate details
HTTPS certificate analysis
Shodan query optimization for AI assistants
Support for multiple AI clients (Claude Code, Codex, Gemini CLI)
Open-source MCP server (free to self-host)
Automated AI triage for 100% of alerts
Transparent reasoning with full audit trails
Executable response plans without pre-built playbooks
Security data lake with unlimited log retention
Flat-rate pricing with up to 85% log cost reduction
Zero vendor lock-in on log storage
100+ plug-and-play API connectors
Handle all alert types across any attack surface
Customizable AI thresholds and policies
One-click manual escalation and response
Context enrichment with environment-specific data
Threat Intelligence Hub for enriched investigations
Multi-tenant support for MSSPs
Cases for unified alert investigations and response
Buyout program for switching from MSSP/MDR
