FullHunt
What it is
FullHunt provides internet intelligence infrastructure for security products and external attack surface monitoring, through APIs, data feeds, MCP, and web access. It discovers internet-facing domains, subdomains, IPs, cloud services, ports, technologies, and certificates. Continuous monitoring tracks new assets, service and certificate changes, configuration drift, and exposure alerts. Vulnerability intelligence maps CVEs to observed assets and adds exploit context, EPSS scores, and CISA KEV status. Enterprise workflows also cover compromised credentials, infostealer activity, typosquatting, and phishing infrastructure linked to monitored organizations. Developer access includes REST APIs, a Python SDK, and MCP tools; API plans consume one credit per request and reset credits monthly. Integrations include Splunk, Sumo Logic, Cortex XSOAR, FortiSOAR, Mindflow, Jira, ServiceNow, Slack, Microsoft Teams, and custom webhooks. The free plan costs nothing and includes 10 credits monthly for internal evaluation. Builder costs $149 a month and is for internal use; Scale costs $1,499 a month and allows commercial use. Users must have lawful authority to monitor submitted assets and use the service for defensive or other legitimate cybersecurity purposes.
For and against
For
- Continuous monitoring tracks asset and configuration changes.
- Vulnerability intelligence includes exploit context and EPSS scores.
- Developer access includes REST APIs and a Python SDK.
- Integrations include security and collaboration tools.
Against
- Free plan is limited to 10 credits monthly.
- Builder is internal use only, with no redistribution.
- Monitoring requires lawful authority over submitted assets.
The verdict
FullHunt combines asset discovery, exposure monitoring, and vulnerability intelligence with developer access and integrations. Review the credit allowance and usage rights for the intended deployment before choosing a plan.
Who it suits
FullHunt is aimed at security vendors and builders, enterprise security teams, and MSSPs monitoring client environments. Its plans distinguish internal use from commercial and redistribution rights.
Plans and prices
Free
10 credits/month · attack-surface discovery · host/domain enrichment · exposure discovery
Read 15 Oct 2026 · fullhunt.io
Builder
500 credits/month · on-demand scanning · exposure monitoring/change alerts · attack-path API
Read 15 Oct 2026 · fullhunt.io
Scale
10,000 credits/month · active/passive vulnerability scanning · historical data · passive DNS
Read 15 Oct 2026 · fullhunt.io
OEM Starter
30,000 credits/month · up to 100 company allowlists · all features · dedicated OEM APIs
Read 15 Oct 2026 · fullhunt.io
OEM Growth
60,000 credits/month · up to 200 company allowlists · all features · dedicated OEM APIs
Read 15 Oct 2026 · fullhunt.io
FullHunt Enterprise
Quoted per organization · up to 400,000 monitored assets per deployment · 14-day trial for qualified organizations · asset-based pricing
Read 15 Oct 2026 · fullhunt.io
OEM Enterprise
Custom credits · unlimited company allowlists · all features · dedicated OEM APIs
Read 15 Oct 2026 · fullhunt.io
On the record
- API and SDKs
- FullHunt offers documented REST APIs, a Python SDK and a native Model Context Protocol server for compatible AI clients.fullhunt.io · read 15 Oct 2026
- API authentication
- API requests use an X-API-KEY header, with standard and dedicated enterprise API hosts and versioned /api/v1/ endpoints.docs.fullhunt.io · read 15 Oct 2026
- API documentation
- The current documentation covers generated OpenAPI references, resource catalogues and OEM, Nexus, enterprise and agent API surfaces.fullhunt.io · read 15 Oct 2026
- API limits
- The legacy API documentation states a 60-request-per-minute limit for several endpoints and limits community data-intelligence results to 100 records per query.api-docs.fullhunt.io · read 15 Oct 2026
- Asset discovery
- The platform enumerates domains, subdomains, IPs, cloud services, ports, technologies and certificates from public internet observations.fullhunt.io · read 15 Oct 2026
- Attack-path analysis
- The API exposes external attack-path analysis for mapping lateral exposure and prioritizing remediation.fullhunt.io · read 15 Oct 2026
- Audience
- The maker positions the products for security vendors and builders, enterprise security teams, and MSSPs operating across client environments.fullhunt.io · read 4 Oct 2026
- Change monitoring
- Continuous monitoring detects new services, configuration drift, new URLs, visual changes and exposure changes, then routes alerts to configured destinations.fullhunt.io · read 15 Oct 2026
- Cloud coverage
- Cloud asset discovery covers AWS, Azure, GCP, Alibaba Cloud and Oracle Cloud without requiring cloud credentials.fullhunt.io · read 15 Oct 2026
- Company profile
- Gartner lists FullHunt as founded in 2018, headquartered in Dubai, United Arab Emirates, with 2–10 employees.gartner.com · read 15 Oct 2026
- Dark web
- Enterprise workflows include monitoring compromised credentials, infostealer activity, typosquatting, and phishing infrastructure tied to monitored organizations.fullhunt.io · read 4 Oct 2026
- Dark-web intelligence
- Enterprise features monitor compromised credentials, infostealer data, typosquatting, phishing infrastructure and brand impersonation.fullhunt.io · read 15 Oct 2026
- Data coverage
- The maker reports more than 2 billion indexed internet hosts, over 800 million CVE-to-host mappings, and an average data freshness cycle of 24 hours.fullhunt.io · read 4 Oct 2026
- Data scale
- FullHunt reports more than 2 billion indexed internet hosts, over 800 million CVE-to-host mappings and an average 24-hour freshness cycle.fullhunt.io · read 15 Oct 2026
- Developer access
- FullHunt offers REST APIs, a Python SDK, and MCP tools, with API plans using one credit per request and monthly credit resets.fullhunt.io · read 4 Oct 2026
- Exposure monitoring
- Continuous monitoring tracks new assets, service and certificate changes, configuration drift, and exposure alerts.fullhunt.io · read 4 Oct 2026
- Independent Go integration
- ProjectDiscovery's Subfinder includes a FullHunt source package documented on pkg.go.dev under an MIT licence.pkg.go.dev · read 15 Oct 2026
- Independent Python library
- PyPI hosts a fullhunt-api package requiring an API key, exposing methods for domains, subdomains, hosts, intelligence, ASN, DNS and search operations.pypi.org · read 15 Oct 2026
