Global Data

Run a search query

Changed on Nov 3, 2026

Run a search query across Censys data. Reference the documentation on Censys Query Language for information about query syntax.<br><br>Host services that match your search criteria will be returned in a matched_services object.<br><br>In a SOC environment, use this endpoint to hunt for hosts, web properties, or certificates that match an indicator, such as a C2 banner, JARM, or favicon hash to scope infrastructure tied to an alert.

post/v3/global/search/query

Request

Base URL
https://api.platform.censys.io
URL
https://api.platform.censys.io/v3/global/search/query
Auth
HTTP bearer

Query parameters

organization_idstring uuid

Example:11111111-2222-3333-4444-555555555555

Headers

X-Organization-IDstring uuid

The ID of a Censys organization to associate the request with. If omitted, the request will be processed using the authenticated user's free wallet where applicable. See the Getting Started docs for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.

Example:11111111-2222-3333-4444-555555555555

Request body

fieldsstring[] nullable

Specify fields to only return in the response. If you provide fields and omit host.services.port, host.services.transport_protocol, and host.services.protocol, then matched_services will not be returned in the response.

page_sizeinteger nullable

Number of results to return to per page. The default and maximum is 100.

page_tokenstring

page token for the requested page of search results

querystring required

CenQL query string to search upon

Example request

{
  "query": "host.services: (protocol=SSH and not port: 22)"
}

Response

Changes

Nov 3, 2026ec1686b0a36a Revision changes
- breaking
  the ///////// response's property format changed from hex to no format for status
- breaking
  the /////// response's property format changed from hex to no format for status
- breaking
  the ///////// response's property format changed from hex to no format for status
- breaking
  the /////// response's property format changed from hex to no format for status
- breaking
  the ///////// response's property format changed from hex to no format for status
- breaking
  the /////// response's property format changed from hex to no format for status
- breaking
  the ///////// response's property format changed from hex to no format for status
- breaking
  the /////// response's property format changed from hex to no format for status
- breaking
  the //////////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from hex to no format for status
- breaking
  the //////////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from hex to no format for status
- breaking
  the //////////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from hex to no format for status
- breaking
  the //////////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from hex to no format for status
- breaking
  the //////////// response's property format changed from utf8 to no format for status
- breaking
  the ////////// response's property format changed from utf8 to no format for status
- breaking
  the ///////// response's property format changed from utf8 to no format for status
- breaking
  the ///////// response's property format changed from utf8 to no format for status
- breaking
  the //////// response's property format changed from utf8 to no format for status
- breaking
  the ////////// response's property format changed from utf8 to no format for status
- breaking
  the ///////// response's property format changed from hex to no format for status
- breaking
  the //////// response's property format changed from utf8 to no format for status
- breaking
  the ///////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from utf8 to no format for status
- breaking
  the ////////// response's property format changed from utf8 to no format for status
- breaking
  the ////////// response's property format changed from hex to no format for status
- breaking
  the //////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from hex to no format for status
- breaking
  the //////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from hex to no format for status
- breaking
  the //////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from hex to no format for status
- breaking
  the //////// response's property format changed from hex to no format for status
- breaking
  the ////////// response's property format changed from utf8 to no format for status
- breaking
  the //////// response's property format changed from utf8 to no format for status
- info
  added the optional property ////// to the response with the status
- info
  added the optional property //////// to the response with the status
- info
  added the optional property ////// to the response with the status
- info
  added the optional property ////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property ////////// to the response with the status
- info
  added the optional property ////////// to the response with the status
- info
  added the optional property ///////// to the response with the status
- info
  added the optional property ///////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property //////// to the response with the status
- info
  added the optional property //////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property //////// to the response with the status
- info
  added the optional property //////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property /////// to the response with the status
- info
  added the optional property ////// to the response with the status
- info
  added the optional property ////// to the response with the status

Operation history