All Global Observations Footprint

Top 10 Identified Countries

Country Observations Percentage
US 333,054,264 46.16%
DE 68,319,212 9.47%
CN 29,398,520 4.07%
FR 25,418,793 3.52%
NL 23,736,271 3.29%
JP 19,923,885 2.76%
CA 19,295,598 2.67%
GB 19,050,071 2.64%
RU 16,250,647 2.25%
IT 10,209,336 1.42%

All Industry Observations Footprint

Top 10 Identified Industries

*Service provider organizations (typically Technology and Telecommunications) are disproportionally represented in the results given their upstream ownership of end-user infrastructure. See our FAQs.

Industry* Observations Percentage
Technology 758,248,780 89.13%
Telecommunications 42,535,713 5.00%
Finance 19,349,913 2.27%
Business Services 8,602,914 1.01%
Government/Politics 3,757,250 0.44%
Education 3,635,082 0.43%
Engineering 3,033,263 0.36%
Consumer Goods 2,222,649 0.26%
Utilities 2,091,840 0.25%
Manufacturing 1,566,264 0.18%

Browse Software by Vendors or their Products

Click a Vendor or Product name below. 

874 Vendors Found
Vendor Observations Sort ascending
Tableau 18,065
WP Time Capsule 18,033
SMA 17,948
ConnectWise 17,898
Openwebui 17,871
OptinMonster 17,742
Azerion 17,251
Flarum 17,139
Web2py 16,332
Pterodactyl 16,129
TP-Link 15,547
Envato 15,469
Litellm 15,214
Progress Software 15,158
Goauthentik 14,978
Nodejs 14,923
PHP-FPM 14,668
Mitel 14,346
Loginizer 14,199
Adminer 14,077
15544 Products Found
Product Vendor Observations Sort ascending
Ts Dvr008 4k Firmware Dahua Technology 10
Tu65du7105kxxc Samsung 10
Tu75du7105kxxc Samsung 10
Tx 66 Firmware Dahua Technology 10
Ua43ru7100sxeg Samsung 10
Ua43tu8000jxxz Samsung 10
Ua49ks7300 Samsung 10
Ua55ju6800 Samsung 10
Ue32n4300 Samsung 10
Ue32t4500auxua Samsung 10
Ue43au9072uxxh Samsung 10
Ue43du7192uxxh Samsung 10
Ue43m5515 Samsung 10
Ue43n5300 Samsung 10
Ue49ls03n Samsung 10
Ue50au7025kxxc Samsung 10
Ue50nu7455 Samsung 10
Ue50tu8505uxxc Samsung 10
Ue55bu8075uxxc Samsung 10
Ue55ku6095 Samsung 10

The leading provider of Cyber Risk Intelligence solutions, Bitsight introduced the next-generation internet scanning Bitsight Groma in May 2024. This technology continuously scans the entire internet to discover assets, collect asset attribution evidence, and identify an ever-growing set of security observations, such as vulnerabilities and misconfigurations.  Groma’s scanning activities presently encompass:


  • 40 million-plus monitored organizations
  • 250 million-plus host names
  • 4 billion-plus routable IPv4 and IPv6 addresses

Greynoise’s recent study testifies the speed of Bitsight Groma.

Bitsight data discovery
Governance charcoal background

Bitsight TRACE team investigates security incidents and identifies vulnerabilities and threats.

View latest security research 

See what you’re up against across the expanding attack surface. Prioritize what matters most. And mitigate where you’re most vulnerable.

External Attack Surface Management

Software Vulnerabilities

The Dynamic Vulnerability Exploit (DVE) score, powered by Bitsight AI, reflects the probability of a vulnerability being exploited by malicious actors over the course of 90 days.

This is a stack-based buffer overflow in Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways, which allows unauthenticated attackers to achieve remote code execution. PoCs are available for CVE-2025-0282, which has been actively exploited in the wild. Bitsight also detected at least one threat actor attempting to sell a PoC for CVE-2025-0282.

This vulnerability allows authentication bypass using an alternate path or channel, which a remote attacker could leverage to gain super-admin privileges via crafted requests to the Node.js websocket module. It affects FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12.

This is a privilege escalation vulnerability in Palo Alto Networks PAN-OS software that has been actively exploited in the wild.

exposure management-easier reporting

While Groma provides visibility into public-facing technologies and vulnerabilities across the Internet, the bigger question is what those signals mean for your organization.

Get your free customized cyber risk report to see key indicators tied to your company’s security posture, incident likelihood, and performance over time.