Featured reads
Security Research
Security research and analysis with Netlas.io
white paper
Fast one-shot passive recon script with Netlas.io
blog post
How to find online cameras with Netlas.io?
blog post
Threat hunting
Non-intrusive security assessment
OSINT investigations
Reputation scoring
Security analysis
Security of IoT and Industrial devices
Vulnerable devices search
Uncover shadow IT and phishing threats
Attack surface identification
3-4 times per year
Please, sign in to manage newsletter subscription
Important updates, sales and promos
1-2 posts per week
Newest CVE, featured search queries
updates and announcements
Connect
Swagger UI
Handy web tool for testing Netlas API
Tools
Official Python SDK and command line utility
Netlas SDK
Netlas Blog
In-depth features overview & case studies
Netlas Cookbook
An ultimate guide on how to make the most of Netlas.io
Scripts & Code Samples
Useful scripts to create you own automations
Learn
Featured queries
Search queries for IoT, routers, IP cameras & more
Documentation
Netlas usage, API specification, SDK & CLI installation
Restricted mobile device support
For a better experience please use screens with a horizontal resolution of 1280 pixels or more
Reconnaissance, security assessment, security research,
and other cases
Use-cases
Documentation,
dev tools,
code samples,
and other resources

Resources
Restricted mobile device support
For a better experience please use screens with a horizontal resolution of 1280 pixels or more
Netlas Datastore

Get Netlas data on-premise

There is no on-premise version of the Netlas app, but you can download and use the data.
1
Data collection
Gathering and enriching data takes from several days to a month, depending on the type of data.
2
Publishing to the app
New indices are validated and published to the app. At this moment, data is available via API.
3
Publishing to the datastore
1-3 days later the data is published in the datastore in form of zipped JSON and CSV files.

Bulk internet scan data

Available with the "Bulk data" Enterprise option only as a set of zipped JSON-files.
Download the latest internet scan data and use it in your own application. About 700 - 900 millions of responses per scan. Continuous updates in parts by /5 network blocks.
All existing IPv4 addresses, hundreds of ports, scanned by IP and domain
Dozens of commonly used protocols are parsed
More than 1000 technologies, devices and software detected
Common Vulnerabilities and Exposures data and PoCs
Whois, Geolocation and ISP data are included

DNS registry datasets

Available at no additional cost to Corporate and Enterprise tier users.
Netlas continuously collects and resolves billions of domains and subdomains across all gTLD and ccTLD. You can download various datasets and use them locally.
Billions of domains and subdomains up to level 10
All types of records, including A, CNAME, NS, MX, TXT, PTR
Forward and reverse DNS lookups
Top 1K - 1M most common subdomains dictionaries

IP and domain whois

Available at no additional cost to Corporate and Enterprise tier users.
Covers all existing IPv4 addresses (more than 4 billion addresses) and active domains, including just registered, published and parked, waiting for renewal, and domains pending deletion (over 600 million domains).
Names, legal names, emails, phones, addresses and other info related to network delegate
The same types of info related to domain registrants and registrars
Data gathered from all major domain registrars and IRR
Abuse email is available for 99% of records
If you need continuous updates, consider purchasing a Corporate or Enterprise subscription. Most datasets (and updates) are available to Corporate tier users without additional cost. You pay for the subscription only.

Frequently asked questions

It is not necessary to have an active Netlas Subscription to get access to the datastore. We recommend that you create at least a free account to maintain your purchase history. Nevertheless, this is not necessary. You can always buy any dataset you want. We will send a download link to the email address provided in your order.