Hi Susmita, Censys performs global internet scans continuously throughout the day. We randomize scanning to mitigate various automated blocking rules. As a result, there is no set time that scanning occurs because it is always happening. Those scans are stored in our Censys Internet Map and available via Censys Search.

Building an attack surface takes time to discover, attribute, and analyze assets for risks. As a result, there is a delay between scanning and realizing the updates on an attack surface.

Assets on an attack surface update once a day and the timing is variable based on attack surface size. Typically, the daily update runs nightly and completes in the morning Eastern Time.

Users are able to request more immediate updates on a given asset to trust but verify remediation for known services by using the on-demand re-scan functionality. Let me know if this answers your question!

Hey Susmita, I updated my original reply after getting some additional info from my team - wanted to make sure you got a ping for it.