Kaeda
Free · Sourced
← All cases
Shodan
Bootstrapped data business, solo-founded in 2009
👤 John Matherly (Conceived internet-wide scanning in 2003, then crawled every IP for years solo — a dataset and security cred no rival could rush.)🌐 site𝕏

One founder crawled the whole internet's devices and built the recon layer every security team now pays for.

Will it work? · our read
Owns the index. A scratch-your-own-itch turned critical infrastructure: 15 years of crawl data and security's default recon tool. Risk: lean, founder-central, with a VC-funded twin (Censys).
01How the money moves
Crawl the entire public internet's devices, 24/7
Fingerprint each service into a searchable index
Charge pros: $49 lifetime, then $69-$1,099/mo API
02The numbers
2009
Solo-launched
wikipedia
$49
One-time membership
shodan.io
$69-1,099
Monthly API tiers
trustradius
No revenue disclosed; tiles are public pricing and launch facts. pricing source
No public revenue. Money comes from $49 lifetime memberships plus $69-$1,099/mo API subscriptions and enterprise deals.
03Weight class — CENTStap an axis
ControlEntryNeedTimeScale
Control High
Owns the brand, the crawlers, the proprietary dataset and the API — no platform landlord sits above it.
04The key move
Index the machines
Everyone chased better web-page search. Matherly aimed at what Google ignored — the service banners every connected device broadcasts. Crawling all of IPv4 for years, he owned an index no rival even had.
fact
The counter-intuitive move
But the moat proved copyable: Censys spun out of academic research with VC money and now indexes the same space, racing Shodan on data freshness.
our read
05Where the moat is
Why a well-funded latecomer still can't just copy it:
15+ yrs of un-backfillable crawl historyDefault tool taught in every pentest courseSelf-serve API, $49 entry hookSecurity-community trust and mindshare
06How it diesmedium confidence
Dead version: a crawler that falls behind. Cloud and IPv6 shrink its scannable surface, legal pushback throttles scans, and funded Censys wins on freshness. Lose the founder or crawl fleet and the index rots. our read
Show evidence · counter
Evidence: Censys spun out of academic scanning research, raised VC, and directly targets Shodan's enterprise attack-surface market.
Counter: Yet 15 years on, Shodan is still the reference tool — cash-flowing, with grandfathered enterprise contracts and a recency lead rivals keep chasing.
07Against rivals
Shodan$49 once + API
CensysVC-funded
ZoomEyeFreemium
BinaryEdgeFrom $10/mo
Censys has more capital; Shodan keeps the brand, the price, and the head start. our read
08Who uses it
PentestersBug-bounty huntersBlue teams / SOCSecurity researchersEnterprises
Would it work for you?
Is there a data type your whole niche needs, that nobody has bothered to index?
Shodan's moat was time — years crawling one boring dataset. What could you start indexing today? We don't score you — you answer.
🚀Use it as a launchpada prompt for your own AI
Copy → paste into your AI → then develop it freely in the conversation.
You are a sharp, honest startup strategist. Use the proven case below as a launchpad for MY idea — help me find my own angle, not copy it. <my_profile> Domain I know: [your domain] My unfair advantage (access/audience): [your edge] Interests: [your interests] Resources & goal: [your resources] · [your goal] </my_profile> <case name="Shodan" model="data"> What it does: A paid search engine over a proprietary, continuously-crawled index of every internet-connected device and service. Why it won (moat): 15+ years of un-backfillable crawl history, plus default-tool status and trust inside the security community. Weakest axis (CENTS): Lean and founder-central; VC-funded Censys competes on data freshness and enterprise features. How it could die: Cloud and IPv6 shrink the scannable surface and funded rivals out-crawl, while key-person risk threatens continuity. </case> <task> Be a skeptical operator, not a cheerleader. No generic startup platitudes. If my angle is weak, say so plainly. First, a reality check: markets like this mostly fail. State the honest base rate (how crowded/hard is this?) and the ONE specific thing that would have to be true for ME to be the exception — grounded in my profile above. Then a compact table: - Fit — does this pattern suit my edge, or fight my gap? - Angle — my sharpest differentiation vs Shodan (concrete, not "better UX") - Distribution — exactly where my first 100 users come from (this is the hardest part — be specific, not "content marketing") - Risk — its "how it dies" (above) in MY situation Finish with one line: "The single thing to do next." Use only the facts above; if data is thin, say so — never invent numbers. Then stay with me and go deeper on whatever I ask — tech stack, rough cost & time, the smallest MVP to test, pricing, or timing. </task>
✓ Copied — paste into your AI
👤Placeholders like [your domain] auto-fill from your profile — example values for now.Set up profile →
Sourcesupdated · daily
Shodan has never disclosed revenue. The "$1M+/yr" is our conservative floor [our read], inferred from public pricing ($49 lifetime; API $69-$1,099/mo Corporate) plus enterprise adoption and 15 years as category leader — not a first-party figure (not independently confirmed, EST). No VC rounds are on record; "self-funded/solo-founded" is [our read] from the absence of filings. Founding year, business model, and user base are documented (Wikipedia, Forbes, founder interviews). Censys as the funded twin is documented; its competitive threat is [our read]. We never score you.