Security Operations Shodan Integration
Enrich security incidents with Shodan banner information.
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2026-09-09 | 0 | - |
| 134 days of no change | ||
| 2026-04-27 | 59 | -59 |
| 86 days of no change | ||
| 2026-01-30 | 60 | -1 |
| 10 days of no change | ||
| 2026-01-19 | 61 | -1 |
| 33 days of no change | ||
| 2025-12-16 | 62 | -1 |
| 11 days of no change | ||
| 2025-12-04 | 61 | +1 |
| 87 days of no change | ||
| 2025-09-07 | 60 | +1 |
| 16 days of no change | ||
| 2025-08-21 | 59 | +1 |
| 58 days of no change | ||
| 2025-06-23 | 58 | +1 |
| 101 days of no change | ||
| 2025-03-13 | 57 | +1 |
| 37 days of no change | ||
| 2025-02-03 | 56 | +1 |
About
Shodan **®** is a search engine for Internet-connected devices that analyzes service banner information from connected devices all around the globe. Service banners include information about a computer system, such as host name, device type, operating system, geographic location, and connected ISP. When integrated with ServiceNow Security Operations, this service banner information provides additional enrichment data and insight for security incidents or investigations.
Key Features
- Automatic enrichment lookups are run on selected observables upon incident creation.
- After the application is configured, the workflow launches automatically, and Shodan lookup execution and completion status are recorded in work notes.
- Observables can be looked up manually by adding them to the Security Incident form and launching workflows.
- Results are displayed in the Network Banners and Observable Enrichment tabs under Related Links.