Shodan
Search engine for internet-connected devices and services, used to find exposed systems and research an organisation’s internet attack surface.
- Category
- OSINT & Reconnaissance
- Pricing
- Freemium
- Platforms
- Web
- Reviewed
- Last reviewed 24 September 2026
What it is
Shodan is a search engine that continuously indexes devices and services exposed to the internet. It is available through its website, an API, a command-line tool, and integrations with other security tools.
What it helps with
Finding exposed services, devices and misconfigurations; researching the internet-facing footprint of an organisation or IP range; enriching IP data; and monitoring your own networks for new exposure.
Who it's for
Security researchers, threat intelligence analysts, pentesters doing reconnaissance, and IT teams watching their own attack surface.
Worth knowing
A free account covers basic searching. A one-time membership and paid subscriptions unlock more search filters, API query credits, data downloads and monitoring.