Search Quick Start Guide
Censys Search makes Internet-facing hosts and certificates searchable, just like Google makes websites searchable.
The best way to get started with Censys Search is to prepare a list of questions you want to answer. Each question you’re asking is expressed as 1 or more search queries written in the Censys Search Language.
When you write a query, Censys evaluates every host or cert in the dataset you’re searching for matches and returns that list to you.
Host Search Result Settings
Censys Search includes several settings for search results.
Sort Order Options
You can select the order of results from your search query:
Relevance: Orders results from most closely matching your search query to least closely matching.
Ascending: Orders results from lowest numerical IP address to highest.
Descending: Orders results from highest numerical IP address to lowest.
Number Hits Per Page
Choose how many hits to show on each page of search results (your results are also limited by your subscription level):
Select to include, exclude, or restrict results to virtual hosts, which are identified by both an IP address and name.
Host Queries: Questions About Hosts
Here’s an example query of hosts.
This query (expressed as a field, value pair):
asks the question:
"Which hosts (and virtual hosts) are presenting a certificate during a TLS handshake that contains the name
censys.io or any subdomains?"
Here’s what that question and answer looks like on the the Search web UI.
Certificate Queries: Questions About Certificates
Here’s an example for certificates. This query:
names: censys.io and labels: unexpired
asks the question:
"Which unexpired certificate records contain the name censys.io or any of its subdomains?"
Here’s what that looks like in the web UI:
Use Reports to understand the distribution of values for a field across a set of hosts or certificates.
To create a report, first provide criteria for hosts or certificates to evaluate in the search bar using the Censys Search Language.
Then click the Report tab on the right side of the results page.
On the report page, type the name of the field whose values you want to see a breakdown for, and select the number of buckets to aggregate values into.