Tool profile
ONYPHE: cost, fit and limits
ONYPHE is a cyber defense search engine and attack surface management service made by ONYPHE SAS in France that collects internet scan data and exposes it through a web interface and APIs for analysts and security engineers.
What to know first
ONYPHE sells two products, an ASM Edition and a cyber threat intelligence offering built on its Ctiscan dataset. The ASM pricing page lists three views with custom pricing, distinguished by monthly result volume and historical depth. API access is described as its primary use case. The legal notice names OVHcloud in France as host, and no AI features or certifications appear on the pages read.
ONYPHE at a glance
| Maker | ONYPHE SAS, France |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | Yes |
| Category | Best AI Attack Surface Management Software in 2026, rank 9 of 10 |
| Website | onyphe.com |
Who ONYPHE is best for
Detection engineers
REST, Export and Bulk APIs with JSON output and hourly inventories suit teams that feed scan data into their own detection pipelines.
European buyers who care about hosting
The legal notice names OVH in Roubaix, France, as the hosting provider, a concrete statement that many rivals do not make.
CERT and analyst teams
The site shows CERT organizations among clients, and history of up to 48 months helps investigators trace when an exposure first appeared.
ONYPHE plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Eagle View (Starter) | Custom pricing | 100,000,000 results per month and 7 months of historical data. A starter view with a rate limit averaging one request per second, aimed at small teams. |
| Griffin View (Unlimited, PRO) | Custom pricing | Unlimited results per month and history of up to 48 months; labeled the best seller on the pricing page. |
| Griffin View ASM Edition (Enterprise) | Custom pricing | Unlimited results and up to 48 months of history with the asset tracking and alerting workflows of the ASM Edition. |
Checked November 2026.
What ONYPHE does
- Query API
- A REST API returns JSON. The home page calls API access the primary use case and advertises a 0.1 second response time. Analysts can also use it from scripts and notebooks.
- Export and Bulk APIs
- An Export API pulls targeted data subsets and a Bulk API handles high-volume queries, so large datasets do not have to be paged one request at a time.
- ASM Edition
- The ASM Edition adds asset tracking, alerting workflows and historical coverage to the vulnerability and risk datasets, with inventories that can be queried hourly. Buyers should confirm which alerting workflows come with their plan.
- Dataset categories
- The feature matrix lists VULNSCAN, RISKSCAN, CTISCAN and CTIURL categories, plus OQLv2 queries and customizable dashboards, though the page does not show which plan includes each.
- Scan APIs
- On-demand Scan APIs and Discovery APIs are listed among features, giving a way to request fresh data on specific targets. Teams can therefore refresh an asset before they act on a stale record.
How ONYPHE handles your data
The legal notices page names ONYPHE SAS, 5 place Francois Mic, 29233 Cleder, France, and says the hosting provider is OVH (OVHcloud) in Roubaix, France. The vendor's privacy policy, retention periods, subprocessors and any statement on AI use were not checked in this review, since only the pricing, home and legal notice pages were opened. No certifications are stated on those pages. Buyers should request the data processing terms and a security questionnaire before sending sensitive seed data to the service.
Where ONYPHE falls short in practice
- Custom pricing on every plan. All three views say custom pricing, so budgeting needs a sales call even for the starter view. A buyer cannot see how price moves with volume or history depth until a quote arrives.
- Rate limit of about one request per second. The FAQ says Views average a rate limit of 1 request per second, with an unrated API available on request. Heavy enrichment jobs may need that upgrade.
- No AI layer or certification shown. The pages read describe no AI features and no certification, so teams with an AI or audit requirement need written answers. Teams with an AI or audit requirement need written answers from the vendor.
Works with
Alternatives to ONYPHE
ONYPHE: common questions
Where does ONYPHE host its data?
The legal notices page names OVH (OVHcloud) in Roubaix, France as the hosting provider. The company itself is ONYPHE SAS, registered in Cleder, France. The company itself is ONYPHE SAS, registered in Cleder, France. Ask about backups and any sub-hosting arrangements.
What are ONYPHE's plans?
The ASM pricing page lists Eagle View for 100,000,000 results a month and 7 months of history, Griffin View with unlimited results and up to 48 months, and Griffin View ASM Edition at the Enterprise level. All use custom pricing.
Does ONYPHE have an API?
Yes. The FAQ says API access is the primary use case. There is a REST API returning JSON, an Export API for targeted subsets and a Bulk API for high volume. Teams that script their own work will find the API options match that use case.
Is there a rate limit on ONYPHE?
Yes. All Views average a limit of one request per second. An unrated API option is available on request, and larger organizations can negotiate volume discounts and dedicated support. Plan the pace of large enrichment jobs accordingly. Ask for terms in writing.
Does ONYPHE use AI?
The pages we opened do not mention AI features. The product is described as a search engine with datasets, APIs and alerting workflows, so ask the vendor about any machine-learning use. Do not assume any built-in AI triage. Ask the vendor about machine learning.