Sign inSee what's exposedCompare
Intelsieve and Censys
Censys maps the whole internet and sells access to that map. Intelsieve watches the domains you own, and an analyst checks every finding before it reaches you. The clearest difference is what you are billed for: Censys meters the actions you take, and Intelsieve charges per domain with everything underneath it included.
Every claim in the Censys column was read from their own pages on 16 October 2026, and we keep the source and the exact wording on file.
At a glance
What it is
External attack surface management for the domains you own, with every finding reviewed by a person before you see it
A platform built on an internet-wide map; its attack surface product discovers and monitors your internet-facing assets automatically
What you are billed for
Domains. Every domain includes everything underneath it: subdomains, hosts and services, however many we find
Actions. Each search, lookup, extra page of results and report costs credits, and adding a filter in the interface counts as another query
When the meter runs out
There is no meter. You are never billed for what we discover
Credit-consuming functionality is restricted until the next monthly allocation or you buy more credits
Pricing published
Yes: $0 (Free), $100/month up to 2 domains (Standard), $250/month up to 6 domains (Business). More than six domains is priced by volume
No. Every platform tier says contact sales, and the attack surface product publishes no price at all. The one published figure is that credit packages start at $100
Free option
Free tier: 1 domain, every subdomain found, five examined, weekly scan, findings arrive unverified
A free account with 100 credits a month, for basic visibility into standard ports and services. It is search and exploration, not the attack surface product
How your estate is defined
You add a domain. We find and check what is underneath it
You add seeds — domains, other DNS names, IP addresses, CIDR blocks or ASNs — and their attribution engine and scans extend the inventory from there
Breadth of scanning
The hosts and services belonging to your domains, checked on the schedule you choose
All 65,535 ports across the internet, with cloud connectors syncing every four hours
What it looks for
Six groups of exposure, with the kinds of finding in each set out on our What we look for page. We do not publish a count
Their documentation says over 400 risk types; their own datasheet says 500 or more. The two figures differ
Who decides a finding is real
An analyst, before it reaches you. Each finding ends in a verdict: still needs fixing, already fixed, or doesn’t apply to you
You. Risks are detected automatically and listed for your team to investigate, with evidence so you can judge whether a risk needs further validation
Human review included
Yes, on Standard and Business. Dismissals are recorded with the reasoning
We found none described. Their documentation assumes your own analysts handle false positives
Ask a person about a finding
Yes, on Standard and Business: ask about a finding and an analyst replies
A paid add-on called Gold Support is listed on their pricing page. What it includes is not published
Credential exposure
Included in Standard and Business: logins that still work, for employees and executives. Not in Free
The products they list are Censys Search, Censys Core, Adversary Investigation, Attack Surface Management and Critical Infrastructure Monitoring. We found no credential-exposure feature described
Export and integrations
API, SIEM export in JSON and CEF, alerts by email, Slack and webhook, and an audit log, from Standard upward
API access on all tiers and native integrations with SIEM, SOAR and TIP tools. Downloading search results as CSV is not available on the free or starter tiers
Which one fits
When Censys is the better choice
- You need to look outward rather than inward — hunting adversary infrastructure, tracking campaigns and engineering detections across the internet rather than watching one estate. That is a job their platform is explicitly built and sold for, and it is not what we do.
- You are doing due diligence on someone else’s infrastructure: M&A assessments or supply-chain risk. Their own use-case list names both, and seeding from an ASN or a CIDR block suits that work better than naming domains one at a time.
- You want coverage of every port on the internet, refreshed daily, including services on nonstandard ports that a domain-scoped product will never be pointed at.
- You are a government agency, or need specialised datasets and government-grade controls. They sell a purpose-built offering for that; we do not.
- You already have analysts whose job is triage. If you have the people to validate findings yourself, you would be paying us for something you can do in-house, and their evidence trail is designed for exactly that reader.
When Intelsieve fits
- You want to know what a published price will be before you talk to anyone. Ours is $100 a month for up to two domains and $250 for up to six.
- You do not want the bill to move when your estate grows. Every domain includes everything underneath it — subdomains, hosts and services, however many we find.
- You do not want to ration your own investigation. Looking twice at the same finding costs you nothing here.
- You do not have an analyst to spare. Every finding on a paid plan is reviewed by a person before it reaches you, and you are never spending credits to work out whether a result matters.
- You want logins that still work — for your employees and your executives — surfaced in the same subscription, not bought as a second product.
- You want a record you can hand to an insurer, a board or an auditor: each finding closed with a verdict, a date and the reasoning, not a dashboard you have to re-query to reconstruct.
See what we find on your domain
Start free with one domain. Nothing to install.