Internet connected device search engine Censys raises $15.5M Series A led by GV and Decibel
Context & Ripple Effects
Censys' $15.5M Series A, led by GV and Decibel, bankrolls its core product: a search engine that indexes internet-connected hosts so organizations can find their own poorly protected assets before attackers do. The raise lands just weeks after rival CyCognito pulled in an $18M Series A for a platform that scans companies' entire spectrum of internet-facing devices — two startups raising on nearly the same thesis within a year.
The arc since then validates the bet: Censys went on to hire a former OneLogin CEO alongside a $35M Series B in 2022, then a $50M Series C plus $25M in debt in 2023, taking total funding past $128M. This A round is the entry point of that climb.
First-order effects
- With GV and Decibel's capital, Censys can scale indexing and enterprise sales against CyCognito, which raised a comparable round ten months earlier — the external asset-discovery race now has two funded contenders.
- Security teams gain a funded vendor whose whole pitch is finding exposed hosts they don't know they own, shifting discovery work from manual audits to search-engine queries.
Second-order effects
- Incumbent IoT security plays like ZingBox, which raised a $22M Series B back in 2017, face pressure as buyers fund discovery-first tools rather than device-agent approaches.
- CyCognito's parallel fundraising forces both vendors to compete on breadth of host coverage and speed of vulnerability attribution, likely accelerating feature releases across the nascent category.
Third-order effects
- If the follow-on rounds are any guide, the market is consolidating around continuous external attack-surface management as a distinct budget line, separate from endpoint and network security.
- Sustained VC appetite — from this Series A through the $128M-plus raised by 2023 — points to investors treating unmanaged internet-exposed assets as a structural problem that outlasts individual breach cycles.
The trend: Enterprise security is reorganizing around continuously discovering internet-exposed assets first and defending them second, with specialized search engines like Censys becoming infrastructure for that shift.