SecurityInsight settings · Settings > Collection scope & limits
Shodan API key
| Key | SI_Shodan_ApiKey |
|---|---|
| Where | Settings > Collection scope & limits > Public IP checks (Shodan) |
| Type | Text |
| Default | Not set: older SHODAN_ApiKey name or SHODAN_API_KEY environment variable is tried; else Shodan lookups are skipped. |
| Edition | Community |
What it does
The Shodan API key used to look up what is exposed on your public IP addresses.
When set
With a key, each address is enriched with open ports, services and vulnerabilities from Shodan, using your Shodan plan's quota. Without it the engine still writes rows, but every Shodan field is empty.
When blank or default
Left blank, the default applies: Not set: older SHODAN_ApiKey name or SHODAN_API_KEY environment variable is tried; else Shodan lookups are skipped.
Risk and how to reverse it
A credential: kept only in the install's Key Vault, never shown again after it is saved. A wrong value stops the steps that use it until it is corrected; nothing else is changed.
Requires
Kept in the install's Key Vault. Read by: publicip.
Recommended
Keep the default. Change it when: Set it when you use the public IP engine; rotate it when you reset the key in Shodan.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack