Internet-Wide Intelligence
Built for defenders.
Defenders need facts.
We show you exactly what we see.
Deep Internet Scans
3,500+ Ports Covered
Refined by continuous survey sampling.
Port-Agnostic Collection
Bespoke algorithms detect any service on any port.
IPv6 Fully Supported
Multi-source hitlist generation.
Virtual & Cloud Hosting Handled
Over three billion IP / host / port combinations matched & monitored.
IP & Domain Registrations
Comprehensive IPv4 & IPv6 coverage
Complete Regional Internet Registry and RWHOIS data.
Over 500 Million Domain Names
Domain registration data monitored, cleaned and normalized.
Extensive DNS Coverage
Over a Billion Hostnames
Forward DNS, MX & TXT collected.
Complete Reverse Lookups
Full coverage across the IPv4 space.
Certificate Transparency
Every Usable CT Log
Continuously monitored, fully searchable.
Enrichments & Fingerprints
Our proprietary product tagging incorporates the industry standard nmap, recog, webappanalyzer and nuclei datasets for maximal device identification.
We include vulnerability reporting with CPE/CVE enrichment from NIST NVD, with CVSS & EPSS scoring. CISA Known Exploited Vulnerabilities are called out and tagged for easy identification.
We pull and fingerprint favicons for every site we find.
At the cutting edge, we include JARM & JA4X fingerprints, fully searchable, for any service running TLS and for every TLS certificate.
We also include JA4TScan fingerprints for all the TCP stacks we encounter.
Geolocation & Entities
Driftnet data is fully tagged with ASN numbers, entity names and geolocations.
We build our own labelling databases directly, by applying LLM technology to IP registration data, then rolling in public geo-feeds supplied by large hosting providers.
Reverse Searching
One of the most tedious parts of a client engagement is often asset enumeration. Driftnet makes it a piece of cake.
Our domain and IP registration data is reverse-searchable by name, domain, address & phone.
User-Prioritizable Collection
If you know what you want better than we do, you can tell us. On-demand IP scans, domain scans and domain WHOIS collection is available via our API.
Secure your network.
Network Admins and Independent Researchers get free non-commercial access to Driftnet.