Censys Search Release Notes
This reverse chronologically ordered list of release notes is designed to help our customers understand changes made to improve their experience using the Censys Search platform.
September 27, 2023
Changed the response behavior of the bulk certificates lookup API to return records for any provided fingerprints for which records exist in the Censys repository. Unrecognized fingerprints are now ignored instead of returning an error.
September 11, 2023
Added new service type to identify services using the RocketMQ protocol. (
September 1, 2023
Added new labels identifying reported web technologies to make searching and classifying services easier.
August 26, 2023
Changed the internal query analyzer to more predictably return results for searches using wildcards and regular expressions.
Read more about wildcard searches here and regular expressions here.
August 11, 2023
Added new service type to identify services with a Cobalt Strike Beacon. (
August 2, 2023
Added a new service type to identify services using the DICOM protocol.
View the complete list of 108+ service names that Censys identifies here.
July 7, 2023
Added syntactic support for nested fields in the Censys Search Language.
Query syntax to search within a single object within a nested collection is available here.
June 22, 2023
Changed the host search index to receive streamed updates live as scan results are processed.
Added all certificate record fields to a new field called
services.tls.certificatefor searching all attributes of a certificate presented during a Censys scan of a service.
The limited set of certificate fields available under
services.tls.certificatesis still populated and searchable.
The host view endpoint on the API and the host table/JSON views in the UI still show the limited set of fields in
Added a new field called
services.tls.presented_chainwhich is an array of objects representing a certificate’s trust chain presented by a service.
Truncated superhosts to only "summary" services to remove noise from search results.
Hosts with more than 100 services will only have one service per service name indexed, on the lowest numerical port that it was observed.
Added a new top-level field called
service_countto indicate the total number of services observed on a host.