The top-rated alternative to Shodan is Censys, which is open source with a free version. People also recommend ZoomEye, Criminal IP, FOFA and IVRE. There's no shortage of Vulnerability Scanners like Shodan, with more than 25 alternatives for the web, Linux, Windows, Mac and self-hosting.
SearchDiggity is the primary attack tool of the Google Hacking Diggity Project. It is Bishop Fox’s MS Windows GUI application that serves as a front-end to the most recent versions of our Diggity tools: GoogleDiggity, BingDiggity, Bing LinkFromDomainDiggity, CodeSearchDiggity...
Browsable directory listing of publicly available FTP-sites.
Human-in-the-loop penetration testing enhanced with AI. Identify vulnerabilities faster, reduce risk, and stay audit-ready with actionable reports and real-time visibility.
United Kingdom
External attack surface management and threat intelligence platform that monitors your domain for vulnerabilities, misconfigurations, and active threats.
Türkiye
On-demand internet scanner. Trigger a live port and service scan of any IP, CIDR or country via REST API and get fresh results in seconds.
Spain
EU
ActiveDNS is a free DNS intelligence search engine for discovering subdomains, finding domains associated with an IP address, and exploring infrastructure by ASN.
Zenkai is an automated website security scanner built for developers, IT teams, and agencies. It checks your site for real vulnerabilities — not just a header checklist.
NetherlandsEU
Attack Surface Monitor discovers and tracks what your organisation exposes to the internet, from a server you control. It ships as a single Go binary with SQLite - no database server, no agents, no telemetry.
Discover, monitor, and protect your organization's entire digital footprint with real-time alerts for security changes.
United Arab Emirates
