OSINTverse
Sign in
← All integrations
Host intelligence

Shodan OSINT integration

Internet-facing hosts, open ports, banners, and DNS from Shodan.

Shodan on a membership account returns full host intelligence for an IP — ports, service banners, CVEs, org, and location — plus DNS records and subdomains for a domain from the Shodan index.

Try in SearchIn UIAPI referenceSee pricing
Capabilities
What this integration is designed to return.
Host lookup with service banners, products, and TLS flags
Open-port inventory, hostnames, ASN/org, and geolocation
CVE tags when Shodan has associated them with the host
Historical banners when the membership key allows history=true
Domain DNS records and subdomain inventory from /dns/domain
Best for
Typical investigation fits.
Internet-facing attack-surface review of a single IP
Finding what a domain looks like on the public internet
Pivoting from a host into WHOIS or breach providers

How the Shodan integration works

What happens between pressing run and reading a result.

  1. 1You submit an IP or a domain from the search desk or POST /v1/search.
  2. 2An IP query calls Shodan's membership host API, asking for historical banners first and falling back to current-only if history is not on the key.
  3. 3A domain query uses the membership DNS domain endpoint — records, tags, and subdomains from the Shodan index.
  4. 4SearchIn normalises the host or DNS payload into cards, keeps the raw JSON, and adds IPs, hostnames, and CVEs to the investigation graph.
Data coverage
What the underlying dataset reaches.

Shodan's internet-wide banner index: services Shodan has seen on public IPs, plus DNS records and subdomains it has associated with a domain.

Supported inputs & pricing

Prices are USD. LeakRadar tiers include unlock ceilings; other integrations are flat per query. Full SearchIn rates are on pricing.

Shodan SearchIn pricing by input type
Input typePrice
Domaindomain$0.10
IP addressip$0.10

Why run Shodan through OSINTverse

You can always buy Shodan directly. Here is what changes when the same data comes through SearchIn instead.

A single $0.10 query returns a host card, ports, banners, and CVEs — no Shodan CLI or credit spreadsheet.

Historical banners are requested when the membership key allows it, then labelled so you can see current vs historical.

IPs, hostnames, and domains drop into the investigation graph so you can pivot into Whoxy, WhoisXML, or breach providers.

Shodan directly compared with Shodan through OSINTverse SearchIn
 Shodan directlyThrough OSINTverse
Getting startedShodan sells a one-time membership or higher query-credit plans, with an API key bound to that account and a monthly query-credit allotment.Sign in, top up from $10, and run Shodan the same minute — no vendor contract, seat, or sales call.
What a query costsPlan, credit pack, or contract pricing set by the vendor and paid up front.Pay per query from your prepaid balance — Shodan starts at $0.10 for domain lookups, with the exact price shown before you run it.
Failed lookupsHandled under the vendor's own credit and refund policy.Automatically refunded to your wallet — a search that fails upstream after billing is not charged.
Output formatA vendor-specific response shape you normalise and render yourself.Normalised result panels plus the raw JSON, returned by the same POST /v1/search contract as every other integration.
Cross-source workCopy-paste between vendor dashboards to follow a lead into another dataset.Results join one investigation graph, so you can pivot an entity into any of the other 13 integrations in a click.
Running it for a teamPer-seat or per-account access, billed and administered per analyst.One shared team wallet with roles, provider allowlists, enforced MFA, and audit history — no per-seat fee.
Volume workScript the vendor API yourself, including retries, polling, and rate handling.Bulk search takes up to 50 queries across selected providers in one submission (max 100 jobs), with per-job status and partial-failure handling.

What every integration inherits

One wallet, no subscriptions
Top up prepaid USD from $10 and spend it a query at a time across all 14 integrations. No monthly fee, no seat count — and the balance never expires.
Failed searches are refunded
If an upstream provider errors or times out after the charge, the search is marked refunded and the money goes back to your wallet automatically.
One API for every source
The same POST /v1/search contract and x-api-key header work for every integration, so adding a source to your automation is a one-word change.
Investigations and pivot graph
Results land in a named investigation you can reopen. Entities become graph nodes you can pivot from into any other integration without retyping.
Team wallets and controls
Share one balance with roles, provider allowlists, enforced MFA, and audit history — instead of buying a vendor seat for every analyst.
Exports built in
Download any result as JSON, CSV, or PDF, and export the investigation graph as PNG, SVG, entities CSV, or graph JSON.

Good to know

Constraints worth reading before you spend a query.

This integration uses host lookup and DNS domain — it does not run on-demand internet scans or manage Shodan alerts.

A host with no public services, or a domain Shodan has not indexed, returns no data and is refunded.

CVE tags and banners reflect what Shodan last observed, not a live authenticated assessment.

Going direct still makes sense at sustained high volume on a single source. Shodan sells a one-time membership or higher query-credit plans, with an API key bound to that account and a monthly query-credit allotment. Through SearchIn you trade that commitment for per-query pricing across 14 integrations.

How to access Shodan

Access via SearchIn UI
Run the integration without leaving the dashboard.
  1. Open SearchIn and choose IP or Domain.
  2. Select Shodan as the provider.
  3. Review the host card and services, or the DNS records and subdomains.

What you'll see

  • ·Host card with ports, org, location, and CVEs
  • ·Filterable service banners
  • ·DNS record table and subdomain list
Open with this integration
Access via API
Authenticate with x-api-key, then create a search job.

Use POST /v1/search with provider shodan. Poll GET /v1/search/{id} when status is running (FaceCheck).

curl -X POST "https://apiv1.osintverse.com/v1/search" \
  -H "Content-Type: application/json" \
  -H "x-api-key: ov_your_api_key" \
  -d '{"provider":"shodan","input_type":"ip","query":"8.8.8.8"}'
Create API keyFull API docs

Sample queries

ip
8.8.8.8
Host banners and ports
domain
example.com
DNS records + subdomains

FAQ

How do I use Shodan in SearchIn?

Open SearchIn and choose IP or Domain. Select Shodan as the provider. Review the host card and services, or the DNS records and subdomains.

How do I call Shodan from the API?

Send POST /v1/search with provider: "shodan" and a supported input_type. Create an API key in the dashboard first.

What does it cost?

Domain: $0.10. IP address: $0.10. See SearchIn pricing for the full rate card.

Why use OSINTverse instead of Shodan directly?

Shodan sells a one-time membership or higher query-credit plans, with an API key bound to that account and a monthly query-credit allotment. On OSINTverse you pay per query from one prepaid wallet, failed searches are refunded automatically, results are normalised into an investigation graph you can pivot from, and the same POST /v1/search call reaches every other integration. A single $0.10 query returns a host card, ports, banners, and CVEs — no Shodan CLI or credit spreadsheet.

What are the limits of Shodan on SearchIn?

This integration uses host lookup and DNS domain — it does not run on-demand internet scans or manage Shodan alerts. A host with no public services, or a domain Shodan has not indexed, returns no data and is refunded. CVE tags and banners reflect what Shodan last observed, not a live authenticated assessment.

Related integrations

OSINT IndustriesPredicta SearchLeakRadar LiteLeakRadar PlusLeakRadar ProLeakOSINTbotDeHashedSnusbaseWhoxyWhoisXMLSecurityTrailsFacecheck.idPicarta.ai