Centinel AnalyticaExpanse
Expanse is a security scanner operated by Palo Alto Networks that continuously scans the global IPv4 address space multiple times per day. The scanner identifies and maps internet-facing assets and presences across the internet, typically as part of cybersecurity monitoring and attack surface management services.
At a glance
- Operator: Palo Alto Networks
- Type: Security
How Centinel checks it
- User agent: The request calls itself this crawler. Anyone can send the same string.
Expanse publishes nothing Centinel can check a source against, so a match reports the name and leaves the source unconfirmed. The match tokens, verification domains, and address feeds are not published here.
Allowing or blocking it
The crawler object in the /validate response sets access_allowed to true only for a verified source that your tenant allowlists. A policy rule can allow or block this crawler by its category, Security.