ONYPHE
French Internet scan data and attack surface management, built on weekly scans of the whole Internet
Quick Overview
| Company | ONYPHE SAS |
|---|---|
| Category | Attack Surface Management and Security Ratings |
| Headquarters | Cléder, France, France |
| Founded | Not stated |
| EU Presence | Yes - France (EU) |
| Data Location | Website hosted by OVH in France; platform hosting not stated |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Weekly Internet-wide scans, asset tracking and alerts, Vulnscan (190+ exploited CVEs), Riskscan, up to 48 months of history, API, OQL query language, threat intelligence datasets |
| Pricing | Custom pricing, contact sales for each view |
| Best For | Analysts and security teams that want raw scan data and domain-based asset discovery |
| Replaces | Bitsight, Censys, Shodan |
Detailed Review
ONYPHE collects scan data on the whole Internet weekly and offers it in tiered views. The ASM Edition adds asset tracking and alerting on top of its vulnerability and risk datasets.
Its legal notices name ONYPHE SAS, based in Cléder, France, SIRET 83154069500036, with Patrice Auffret as president.
Data first
The homepage states 20 billion or more banners collected monthly, 10 billion or more DNS entries monthly and more than 5,000 ports scanned weekly. The API response time is stated as 0.1 seconds.
The ASM Edition
Vulnscan checks more than 190 actively exploited CVEs against exposed services, and Riskscan checks services against risky configuration baselines. The vendor says it identifies assets by domain name and not only by IP address.
Limitations to Consider
Prices are not published for any view. The product is closer to a data platform than a ready-made rating: there is no supplier score, and analysts need to build queries and workflows. The pricing pages state a rate limit of about one request per second on all views. For a guided portal, CybelAngel is more hands-on.
Who Should Use ONYPHE
Security analysts and CTI teams that want an independent French source of Internet scan data with asset tracking.
Pros and Cons
Pros
- Internet-wide scan data refreshed weekly
- Domain-based asset discovery
- History up to 48 months on larger views
- API access
- French SAS with published registration
Cons
- No public prices
- No supplier security score
- Rate limit of about one request per second
- Analyst skills needed to use it fully
Alternatives to ONYPHE
Other European attack surface management and security ratings worth comparing before you decide:
Orpheus Cyber
United Kingdom · Cyber risk scores for your own estate and your suppliers
CybelAngel
France · Daily external scanning for exposed assets and leaked data
Hadrian
Netherlands · Continuous attack surface mapping with validated exposures
Intruder
United Kingdom · Attack surface monitoring and scanning with a free plan
See all European attack surface management and security ratings or compare them directly against Bitsight on our alternatives page.
Frequently Asked Questions
No. Both the ASM and the CTI pricing pages say custom pricing and contact sales.
The vendor states that it scans the whole Internet weekly.
No. It provides scan data, asset tracking and alerts, not a supplier score.