Security — entry 027 of 30

Shodan

Verified Jul 2026

Shodan continuously scans the public internet and indexes service banners, ports, and metadata for hundreds of millions of connected devices, from routers and webcams to industrial control systems. Its REST API surfaces that index for host search, exposure monitoring, and attack-surface discovery, with free InternetDB lookups for single IPs alongside credit-metered search and export endpoints. Full account features (search filters, scanning, CLI) unlock with a one-time paid membership or a monthly API subscription.

attack-surfacethreat-inteliotport-scanninginternet-scanning
AuthenticationAPI KeySign up with the provider to obtain credentials.
HTTPSSupportedTraffic is encrypted in transit.
CORSEnabledCallable directly from browser JavaScript.
PricingFreemiumA usable free tier exists, with paid plans for more volume.
FormatsJSONResponses can be requested as JSON.

GreatAPIs Score

Score61out of 100
Authentication15/25API key required
Pricing17/20Freemium tier available
Docs0/20No docs or spec available
Formats9/15Single response format
Freshness20/20Verified within 6 months

Embed this badge

Scored 61 on greatapis.com
<a href="https://greatapis.com/api/shodan/"><img src="https://greatapis.com/badge/shodan.svg" alt="Scored 61 on greatapis.com"></a>

Auth quickstart

  1. Sign up with the provider to get an API key.
  2. Send it on every request as a headerAuthorization: <key>
  3. The exact header isn't documented — Authorization is a common default; confirm in the provider's docs.
Stored keyNo key stored

Your key is stored only in this browser (localStorage) and sent directly to the API — never to greatapis.