What Netlas does

Netlas operates a passive internet-wide scanning and OSINT platform that aggregates scan data, DNS records, WHOIS information, and SSL certificates into searchable data collections accessible to security professionals. The product suite comprises an IoT Search Engine, DNS and WHOIS lookup tools (IP and Domain), an SSL certificate database, an interactive Attack Surface Discovery Tool with dynamic visualization, an on-demand non-intrusive Private Scanner, and a Datastore for bulk data access — all reachable through a Full-REST API, Python SDK, and command-line interface. Named and unnamed users include security researchers, penetration testers, bug bounty hunters, threat intelligence teams, MSSPs, and enterprise security organizations; visible logos span defense and space (Maxar), cybersecurity vendors and MSSPs (Muscope, Ovalsec, Assetnote, DefendeEdge, Hacket, Cybermaxx, Logically, Specterops), development services (BairesDev, Cogility), and financial services (Exinity).

Underlying technology relies on passive scanning that infers products and technologies from approximately 75% of host responses, with version detection in roughly 33% of cases, and cross-references identified software versions against the U.S. NIST National Vulnerability Database to surface CVE-flagged assets and known exploit availability. The platform's data holdings exceed 637 million active internet services, 2.5 billion domains in the current DNS collection, 2.9 billion parsed SSL certificates, 11 million IP WHOIS records, and 248 million domain WHOIS records, with historical data access for DNS and WHOIS collections supporting change-over-time analysis. Deep integrations with Maltego (transforms), ProjectDiscovery's Subfinder and Uncover, and theHarvester embed Netlas data inside widely used reconnaissance and OSINT toolchains.

Netlas monetizes almost entirely through tiered subscriptions — Community (free, 50 requests/day), Freelancer ($49/month, $490/year), Business ($249/month, $2,490/year), Corporate ($830/month), and Enterprise (custom pricing) — supplemented by usage-based revenue from Datastore bulk downloads and payment processing through Paddle (with cryptocurrency one-time payments available). Distribution blends product-led growth via self-serve signup, an API-first developer posture, and community-led acquisition through technical content, influencer sponsorships, and educational licenses; direct sales support the Enterprise tier with demo booking and 2–4 week trials. Free integration development licenses are extended to security software developers building Netlas into their products.

Name

Netlas

Legal name

Netlas LLC

Website

https://netlas.io

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

1–10 employees

Short description

Netlas provides a passive internet-wide scanning and OSINT platform that aggregates DNS, WHOIS, SSL, and host scan data for IT security professionals, bug bounty hunters, threat intelligence teams, and MSSPs, with API and SDK access and integrations into Maltego, Subfinder, and theHarvester.

Ownership category

akta.pro rank

Product category

Cybersecurity Intelligence / Attack Surface Management

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518210), Web Search Portals, Libraries, Archives, and Other Information Services (5192)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371), Services-Computer Processing & Data Preparation (7374)

akta.pro primary industry

Packet Brokers & Network Traffic Visibility (TAPs, NPBs) (HDADABAM)

Keywords

• Internet intelligence platform
• OSINT cybersecurity
• Attack surface management
• Internet asset discovery
• Vulnerability intelligence

Headquarters

HQ city

Yerevan

HQ country

Armenia

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Marketing or Sales, Operations

Revenue model

1. Subscription Plans: Netlas generates revenue primarily through tiered subscription plans (Community free, Freelancer $49/mo, Business $249/mo, Corporate $830/mo, Enterprise custom). Recurring subscriptions provide automated renewal with seamless service access.
2. One-Time Payments: Cryptocurrency payments are accepted for one-time purchases without recurring payment options. Users must initiate each payment manually.
3. Datastore Data Access: Bulk access to Internet Scan Data with daily scan volumes downloadable as JSON files, providing additional revenue from power users requiring large-scale data access.
4. Annual Invoice Payments: For annual subscriptions at Business tier or higher, invoice payable via bank transfer is available as an alternative to automated recurring payments.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels11 records

Core offering

Netlas provides an internet-wide scanning and OSINT platform that maintains large-scale data collections of publicly accessible services, DNS records, WHOIS data, and SSL/TLS certificates, exposed via a web-based search console, an interactive Attack Surface Discovery tool, a non-intrusive Private Scanner, a bulk Datastore, and a full-REST API with Python SDK. Customers use the platform to discover, monitor, and assess internet-facing assets for attack surface management, penetration testing, threat hunting, vulnerability identification (CVE matching), and OSINT investigations.

Product overview

Netlas is a comprehensive internet-wide scanning and OSINT platform that offers a unified suite of search tools and data access products. The core platform consists of the IoT Search Engine for internet scan data, combined with specialized search tools for DNS Lookup, IP WHOIS, Domain WHOIS, and SSL Certificates. The Attack Surface Discovery Tool and Private Scanner enable visualization and non-intrusive scanning of attack surfaces, while the Datastore provides bulk data access. All functionality is accessible via the Netlas API with Python SDK support.

Differentiator

Problem solved

Functional benefit

Products and services

• Netlas IoT Search Engine Comprehensive internet scan data search engine providing data on the majority of publicly available services, enriched with WHOIS, DNS, and other contextual information for cybersecurity and OSINT investigations. Used by security professionals to discover internet-facing assets across thousands of searchable fields.
• DNS Lookup Search tool for exploring DNS records including A, AAAA, CNAME, MX, NS, TXT records and their historical changes.
• IP WHOIS Lookup Search tool for IP address ownership information including IP address ranges, network provider names, and contact details obtained through WHOIS record parsing.
• Domain WHOIS Lookup Search tool for domain name information including owner contact info, registrar details, registration dates, and expiration dates.
• SSL Certificates Search tool for SSL/TLS certificate information collected from Certificate Transparency Logs and host scans, including issuer, owner, and validity period details.
• Attack Surface Discovery Tool Interactive tool enabling exploration of relationships between domains, IPs, services, SSL certificates and more, with dynamic attack surface mapping capabilities for identifying shadow IT and hidden risks. Available to all paid tiers with node count limits scaling per subscription.
• Private Scanner On-demand passive network scanner enabling non-intrusive gathering of detailed insights about attack surfaces without interacting with the target, ensuring privacy and compliance. Targets per scan vary by subscription tier from 512 (Freelancer) to 65,536 (Enterprise).
• Datastore Structured datasets including DNS Records, IP WHOIS, Domain WHOIS, and bulk download of Internet Scan Data as JSON files, with real-time data accessible through the API. Targets power users requiring large-scale data access.
• Netlas API Full-REST API available to all registered users enabling programmatic access to all Netlas data collections with Python SDK and command-line interface support. Includes operations for count, download, host information retrieval, indices listing, and search queries. OpenAPI specification is published.

Quantifiable outcome

• 95% working URLs in search results compared to 70-80% for competitors
• +2 more outcomes

Named customers17 records

Segments6 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

AI capability2 records

Feature11 records

Partnerships

Five partnerships are on record, tiered core.

• MaltegocoreTechnology or IntegrationNetlas Responses, DNS, Whois, SSL Certs and other transforms are available in Maltego, allowing users to leverage Netlas data within Maltego's intelligence and visualization platform.
• Subfinder (Project Discovery)coreTechnology or IntegrationSubdomain search in the Netlas DNS data collection is available with Subfinder by ProjectDiscovery.io, enabling users to discover subdomains using Netlas data.
• theHarvestercoreTechnology or IntegrationSubdomain search in the Netlas DNS data collection is available with theHarvester, an OSINT tool for gathering subdomains, emails, and hosts.
• Uncover (Project Discovery)coreTechnology or IntegrationNetlas product (tag) search is available through Uncover by ProjectDiscovery.io, a utility for finding exposed hosts using multiple data sources.
• PaddlecoreTechnology or IntegrationThird-party payment processor partner for securely processing fiat payments. Paddle handles payment compliance, PCI requirements, sales tax collection, and refunds. Payments from certain countries may be restricted due to compliance requirements.

Scale indicators7 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• BinaryEdge: BinaryEdge offers internet-wide scanning data, exposed service/credential detection, and OSINT APIs aimed at security teams and MSSPs. Its data-collection and SaaS model are closely comparable to Netlas's IoT Search Engine and Datastore offerings.
• ZoomEye: ZoomEye, by Knownsec, is a Chinese internet asset search engine similar to Shodan/Censys. Netlas compares itself directly to ZoomEye, indicating near-identical product positioning for security researchers and red-teamers.
• Shodan: Shodan is the most direct competitor — an internet-wide device and service search engine offering IoT/host search, DNS/WHOIS lookups, and a paid API for security researchers. Netlas explicitly publishes a head-to-head comparison against Shodan, underscoring the overlap in product and target buyer.
• Censys: Censys provides internet-wide scanning, certificate/host data, and an attack-surface management product (Censys ASM) — directly competing with Netlas's IoT search engine, SSL certificate collection, and attack surface discovery tool for security teams.
• FOFA: FOFA is a Chinese internet asset search engine operated by Chuangyu/Network Security Group, offering host, service, and certificate search. Netlas publishes a direct comparison page against FOFA, signaling direct product overlap in OSINT asset discovery.
• Onyphе: Onyphe aggregates internet-scale data (DNS, WHOIS, certificates, exposed services) into a search and threat-intelligence platform. Like Netlas, it sells to defenders, threat hunters, and bug-bounty researchers, with overlapping data types and API-first delivery.

Broad incumbents

• GreyNoise Intelligence: GreyNoise focuses on internet-scan noise (benign vs. malicious scanners, mass-exploitation telemetry) and sells threat-intelligence feeds to SOC teams. It overlaps with Netlas's threat-hunting and internet-scan use cases, but from a complementary threat-intel angle rather than asset-discovery.

Emerging players

• IPinfo: IPinfo provides IP address intelligence (geolocation, ASN, WHOIS, privacy detection) via API and downloadable datasets. It overlaps with Netlas's IP WHOIS Lookup and IP-context features for security and fraud use cases, and is also a published Netlas comparison reference.
• urlscan.io: urlscan.io provides URL and webpage scanning, screenshotting, and OSINT for security researchers. Netlas explicitly compares against urlscan, and the two are commonly used together in OSINT and phishing-investigation workflows.
• ProjectDiscovery: ProjectDiscovery builds open-source recon tools (Subfinder, Nuclei, Uncover) that integrate with Netlas as a data source. While the relationship is currently partner-like, ProjectDiscovery could evolve into a competing data platform, making it a strategically relevant peer in the same attack-surface workflow.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/Netlas_io
• GitHubgithub.com/netlas-io
• LinkedInlinkedin.com/company/netlas

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Netlas