> ## Documentation Index
> Fetch the complete documentation index at: https://docs.infrawatch.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Infrawatch documentation

> Investigate internet infrastructure, enrich indicators, and automate security workflows

<div className="relative overflow-hidden px-6 pb-16 pt-20 lg:pb-24 lg:pt-28">
  <div className="absolute inset-x-0 top-0 -z-10 mx-auto h-[32rem] max-w-5xl bg-[radial-gradient(circle_at_top,_rgba(137,82,249,0.18),_transparent_65%)]" />

  <div className="mx-auto max-w-4xl text-center">
    <div className="mb-5 inline-flex items-center gap-2 rounded-full border border-purple-200 bg-purple-50 px-3 py-1 text-sm font-medium text-purple-700 dark:border-purple-900/70 dark:bg-purple-950/40 dark:text-purple-300">
      Beat the adversary with 22B+ events a day
    </div>

    <h1 className="text-balance text-4xl font-semibold tracking-tight text-gray-950 sm:text-6xl dark:text-white">
      The most complete public map of the internet
    </h1>

    <p className="mx-auto mt-6 max-w-2xl text-pretty text-lg leading-8 text-gray-600 dark:text-gray-400">
      Revisit more than 400 million services every day across more protocols
      than web-first internet search, with first-party observations connected
      to DNS, fingerprints, network attribution, proxy intelligence, exposed
      content, and reporting.
    </p>

    <div className="mt-8 flex flex-col items-center justify-center gap-3 sm:flex-row">
      <a href="/quickstart" className="inline-flex w-full items-center justify-center rounded-lg bg-purple-600 px-5 py-3 text-sm font-semibold text-white shadow-sm transition hover:bg-purple-500 sm:w-auto">
        Make your first request →
      </a>

      <a href="/use-cases" className="inline-flex w-full items-center justify-center rounded-lg border border-gray-200 bg-white px-5 py-3 text-sm font-semibold text-gray-900 transition hover:border-purple-300 hover:text-purple-700 sm:w-auto dark:border-white/10 dark:bg-white/5 dark:text-white dark:hover:border-purple-500/60 dark:hover:text-purple-300">
        Explore investigations
      </a>
    </div>
  </div>
</div>

<div className="border-y border-gray-200 bg-gray-50/70 px-6 py-16 dark:border-white/10 dark:bg-white/[0.025]">
  <div className="mx-auto max-w-6xl">
    <div className="mb-9 flex flex-col gap-4 sm:flex-row sm:items-end sm:justify-between">
      <div>
        <p className="text-sm font-semibold uppercase tracking-wider text-purple-600 dark:text-purple-400">
          The Infrawatch platform
        </p>

        <h2 className="mt-2 text-3xl font-semibold tracking-tight text-gray-950 dark:text-white">
          Explore internet infrastructure data
        </h2>

        <p className="mt-3 max-w-2xl text-gray-600 dark:text-gray-400">
          Start with the data product that answers your question. Move between
          them as the investigation expands.
        </p>
      </div>

      <a href="/platform/overview" className="text-sm font-semibold text-purple-700 hover:text-purple-600 dark:text-purple-300 dark:hover:text-purple-200">
        Platform overview →
      </a>
    </div>

    <div className="grid gap-x-10 gap-y-2 md:grid-cols-2">
      <a href="/platform/scanning" className="group flex items-center gap-4 rounded-xl px-3 py-4 transition hover:bg-white dark:hover:bg-white/[0.04]">
        <img src="https://mintcdn.com/infrawatch/hFIgmGIh7O3VGQHG/images/products/scanning.svg?fit=max&auto=format&n=hFIgmGIh7O3VGQHG&q=85&s=e45652451d1db79d89231f1902cfa027" alt="" className="h-9 w-9 shrink-0" width="32" height="32" data-path="images/products/scanning.svg" />

        <div className="min-w-0 flex-1">
          <div className="font-semibold text-gray-950 dark:text-white">Scanning</div>
          <div className="mt-0.5 text-sm text-gray-500 dark:text-gray-400">Hosts, services, protocols, fingerprints, and exposure history</div>
        </div>

        <span className="text-gray-400 transition group-hover:translate-x-0.5 group-hover:text-purple-500">›</span>
      </a>

      <a href="/platform/dns" className="group flex items-center gap-4 rounded-xl px-3 py-4 transition hover:bg-white dark:hover:bg-white/[0.04]">
        <img src="https://mintcdn.com/infrawatch/hFIgmGIh7O3VGQHG/images/products/dns.svg?fit=max&auto=format&n=hFIgmGIh7O3VGQHG&q=85&s=47a48af3a654f274eadb1754689f8dc4" alt="" className="h-9 w-9 shrink-0" width="32" height="32" data-path="images/products/dns.svg" />

        <div className="min-w-0 flex-1">
          <div className="font-semibold text-gray-950 dark:text-white">DNS</div>
          <div className="mt-0.5 text-sm text-gray-500 dark:text-gray-400">Observed name-to-address relationships over time</div>
        </div>

        <span className="text-gray-400 transition group-hover:translate-x-0.5 group-hover:text-purple-500">›</span>
      </a>

      <a href="/platform/residential-proxies-vpns" className="group flex items-center gap-4 rounded-xl px-3 py-4 transition hover:bg-white dark:hover:bg-white/[0.04]">
        <img src="https://mintcdn.com/infrawatch/hFIgmGIh7O3VGQHG/images/products/proxies.svg?fit=max&auto=format&n=hFIgmGIh7O3VGQHG&q=85&s=8eb2cc12b3c0fbeb73ec4144ffd0f4e2" alt="" className="h-9 w-9 shrink-0" width="32" height="32" data-path="images/products/proxies.svg" />

        <div className="min-w-0 flex-1">
          <div className="font-semibold text-gray-950 dark:text-white">Residential Proxies & VPNs</div>
          <div className="mt-0.5 text-sm text-gray-500 dark:text-gray-400">Observed endpoints, providers, networks, and service evidence</div>
        </div>

        <span className="text-gray-400 transition group-hover:translate-x-0.5 group-hover:text-purple-500">›</span>
      </a>

      <a href="/platform/reports" className="group flex items-center gap-4 rounded-xl px-3 py-4 transition hover:bg-white dark:hover:bg-white/[0.04]">
        <img src="https://mintcdn.com/infrawatch/hFIgmGIh7O3VGQHG/images/products/reports.svg?fit=max&auto=format&n=hFIgmGIh7O3VGQHG&q=85&s=3f8b076d5f975d979b40765807982f25" alt="" className="h-9 w-9 shrink-0" width="32" height="32" data-path="images/products/reports.svg" />

        <div className="min-w-0 flex-1">
          <div className="font-semibold text-gray-950 dark:text-white">Reports</div>
          <div className="mt-0.5 text-sm text-gray-500 dark:text-gray-400">Published intelligence and extracted indicators</div>
        </div>

        <span className="text-gray-400 transition group-hover:translate-x-0.5 group-hover:text-purple-500">›</span>
      </a>

      <a href="/platform/open-directories" className="group flex items-center gap-4 rounded-xl px-3 py-4 transition hover:bg-white dark:hover:bg-white/[0.04]">
        <img src="https://mintcdn.com/infrawatch/hFIgmGIh7O3VGQHG/images/products/open-directories.svg?fit=max&auto=format&n=hFIgmGIh7O3VGQHG&q=85&s=9d4933170130a85677e2af545fa4d521" alt="" className="h-9 w-9 shrink-0" width="32" height="32" data-path="images/products/open-directories.svg" />

        <div className="min-w-0 flex-1">
          <div className="font-semibold text-gray-950 dark:text-white">Open Directories</div>
          <div className="mt-0.5 text-sm text-gray-500 dark:text-gray-400">Indexed directory listings, files, metadata, and classifications</div>
        </div>

        <span className="text-gray-400 transition group-hover:translate-x-0.5 group-hover:text-purple-500">›</span>
      </a>

      <a href="/external-surface/overview" className="group flex items-center gap-4 rounded-xl px-3 py-4 transition hover:bg-white dark:hover:bg-white/[0.04]">
        <img src="https://mintcdn.com/infrawatch/gCEz_Bv1hOrMPG8n/images/products/esi.svg?fit=max&auto=format&n=gCEz_Bv1hOrMPG8n&q=85&s=ebc334425db0ee423bdf03e1348a066c" alt="" className="h-9 w-9 shrink-0" width="32" height="32" data-path="images/products/esi.svg" />

        <div className="min-w-0 flex-1">
          <div className="font-semibold text-gray-950 dark:text-white">External Surface Intelligence</div>
          <div className="mt-0.5 text-sm text-gray-500 dark:text-gray-400">Owned-asset inventory, curated services, and worked findings</div>
        </div>

        <span className="text-gray-400 transition group-hover:translate-x-0.5 group-hover:text-purple-500">›</span>
      </a>
    </div>
  </div>
</div>

<div className="mx-auto max-w-6xl px-6 py-16">
  <div className="grid gap-10 lg:grid-cols-[0.8fr_1.2fr] lg:items-center">
    <div>
      <p className="text-sm font-semibold uppercase tracking-wider text-purple-600 dark:text-purple-400">
        One connected map
      </p>

      <h2 className="mt-2 text-3xl font-semibold tracking-tight text-gray-950 dark:text-white">
        Ask questions that cross datasets
      </h2>

      <p className="mt-4 text-gray-600 dark:text-gray-400">
        Combine direct observations and derived context in one search. Find
        infrastructure classified as a proxy, serving a particular application,
        in a specific country-then pivot into its DNS history, fingerprints,
        reports, and exposed files.
      </p>
    </div>

    <div>
      ```text InfraQL theme={null}
      services.tags.category:proxy/*
      AND country_code:DE
      AND same_service(
        protocol:https
        AND http.title="Grafana"
      )
      ```
    </div>
  </div>
</div>

<div className="mx-auto max-w-6xl px-6 py-16">
  <div className="mb-8">
    <p className="text-sm font-semibold uppercase tracking-wider text-purple-600 dark:text-purple-400">
      Work with the data
    </p>

    <h2 className="mt-2 text-3xl font-semibold tracking-tight text-gray-950 dark:text-white">
      Keep the investigation moving
    </h2>
  </div>

  <CardGroup cols={3}>
    <Card title="Projects" icon="https://mintcdn.com/infrawatch/hFIgmGIh7O3VGQHG/images/products/projects.svg?fit=max&auto=format&n=hFIgmGIh7O3VGQHG&q=85&s=72bbbb11db9c579733069eaadb576b31" href="/platform/projects" arrow width="32" height="32" data-path="images/products/projects.svg">
      Keep investigations, indicators, notes, saved queries, and activity
      together.
    </Card>

    <Card title="InfrAI" icon="https://mintcdn.com/infrawatch/gCEz_Bv1hOrMPG8n/images/products/infrai.svg?fit=max&auto=format&n=gCEz_Bv1hOrMPG8n&q=85&s=543b3c01c9b46f482be33ce606e0c66e" href="/infrai/overview" arrow width="32" height="32" data-path="images/products/infrai.svg">
      Ask InfrAI to explore evidence and build a connected investigation graph.
    </Card>

    <Card title="External Surface" icon="https://mintcdn.com/infrawatch/gCEz_Bv1hOrMPG8n/images/products/esi.svg?fit=max&auto=format&n=gCEz_Bv1hOrMPG8n&q=85&s=ebc334425db0ee423bdf03e1348a066c" href="/external-surface/overview" arrow width="32" height="32" data-path="images/products/esi.svg">
      Inventory what your organisation exposes and work the findings raised
      against it.
    </Card>
  </CardGroup>
</div>

<div className="border-y border-gray-200 bg-gray-50/70 px-6 py-16 dark:border-white/10 dark:bg-white/[0.025]">
  <div className="mx-auto max-w-6xl">
    <div className="mb-8 text-center">
      <p className="text-sm font-semibold uppercase tracking-wider text-purple-600 dark:text-purple-400">
        Get started
      </p>

      <h2 className="mt-2 text-3xl font-semibold tracking-tight text-gray-950 dark:text-white">
        Follow an analyst workflow
      </h2>

      <p className="mx-auto mt-3 max-w-2xl text-gray-600 dark:text-gray-400">
        Start with a real question, follow the evidence, then adapt the query to
        your own indicators.
      </p>
    </div>

    <CardGroup cols={3}>
      <Card title="Investigate an IP" img="https://mintcdn.com/infrawatch/GgP_1dT5TbxRxYSF/images/use-cases/investigate-ip.svg?fit=max&auto=format&n=GgP_1dT5TbxRxYSF&q=85&s=51c212ecf9063527458c22dbc53c5d3b" href="/use-cases/investigate-an-ip" cta="Follow the workflow" arrow width="640" height="320" data-path="images/use-cases/investigate-ip.svg">
        Build host context, inspect services, pivot through DNS, and find related
        reporting.
      </Card>

      <Card title="Pivot through passive DNS" img="https://mintcdn.com/infrawatch/YpGUqk65tCzbtHqA/images/use-cases/passive-dns.svg?fit=max&auto=format&n=YpGUqk65tCzbtHqA&q=85&s=497d4bba904ab52f295478ca91db08d8" href="/use-cases/pivot-through-passive-dns" cta="Trace infrastructure" arrow width="640" height="320" data-path="images/use-cases/passive-dns.svg">
        Move between names and addresses and understand when each relationship
        was observed.
      </Card>

      <Card title="Hunt exposed services" img="https://mintcdn.com/infrawatch/YpGUqk65tCzbtHqA/images/use-cases/service-hunting.svg?fit=max&auto=format&n=YpGUqk65tCzbtHqA&q=85&s=43ba559e469e4fd8cb0dd1ca1c03d5db" href="/use-cases/hunt-exposed-services" cta="Build a hunt" arrow width="640" height="320" data-path="images/use-cases/service-hunting.svg">
        Combine protocol, network, HTTP, TLS, fingerprint, and tag evidence.
      </Card>
    </CardGroup>

    <div className="mt-6 flex justify-center">
      <a href="/use-cases/enrich-ip-lists" className="text-sm font-semibold text-purple-700 hover:text-purple-600 dark:text-purple-300 dark:hover:text-purple-200">
        Need to enrich a list? Use bulk lookup →
      </a>
    </div>
  </div>
</div>

<div className="mx-auto max-w-6xl px-6 py-16">
  <div className="mb-8">
    <p className="text-sm font-semibold uppercase tracking-wider text-purple-600 dark:text-purple-400">
      Build with Infrawatch
    </p>

    <h2 className="mt-2 text-3xl font-semibold tracking-tight text-gray-950 dark:text-white">
      From first query to production integration
    </h2>
  </div>

  <CardGroup cols={3}>
    <Card icon="https://mintcdn.com/infrawatch/gCEz_Bv1hOrMPG8n/images/products/search.svg?fit=max&auto=format&n=gCEz_Bv1hOrMPG8n&q=85&s=e80dbe9b7724f88ce870e69cb367b435" href="/search" title="Learn InfraQL" width="32" height="32" data-path="images/products/search.svg">
      Use typed fields, time windows, correlation, patterns, and validation.
    </Card>

    <Card icon="https://mintcdn.com/infrawatch/gCEz_Bv1hOrMPG8n/images/products/api.svg?fit=max&auto=format&n=gCEz_Bv1hOrMPG8n&q=85&s=50b239ba7ccf3ebb74f6b239980bc623" href="/api-reference/introduction" title="Explore the API" width="32" height="32" data-path="images/products/api.svg">
      Browse authentication, endpoint contracts, schemas, and examples.
    </Card>

    <Card icon="https://mintcdn.com/infrawatch/gCEz_Bv1hOrMPG8n/images/products/data-dictionary.svg?fit=max&auto=format&n=gCEz_Bv1hOrMPG8n&q=85&s=7610d618bf3603732c6f9102b62101df" href="/data-dictionary" title="Inspect the fields" width="32" height="32" data-path="images/products/data-dictionary.svg">
      Find public fields, types, operators, and dataset-specific semantics.
    </Card>
  </CardGroup>
</div>