Groma Explorer FAQs

Please use our contact form and enter your question in the “comments” area.

Please visit our company website at bitsight.com.

Groma Explorer data is updated daily. The latest update was on 4 January 2025.

Bitsight’s proprietary Groma scanning engine sits at the center of our Active Data Collection capability. The scanner continuously monitors the entire internet to provide a near real-time view of connected assets and entities. Operating our own scanning technology – and not relying solely on third-party providers – creates the ability to:

• Innovate more rapidly through greater control over the scanning process
• Accelerate mean-time-to-detection for new vulnerabilities and asset updates
• Respond faster to changes in exposed environments

In Groma Explorer, an observation is a piece of software at a specific IP address, on a specific port, possibly with a specific hostname.

Groma Explorer aggregates data from the past 30 days. If a vendor, product or version of a product is missing, it is possible that it was not picked up in our scanning data or that the data that was scanned is older than 30 days.

Also, Groma Explorer can only observe software that is exposed on the public Internet, and can only observe software it knows how to observe. Not all software is visible on the Internet, and while Groma’s capabilities are impressive, it does not know about every possible piece of software. Please use the contact form to make suggestions about software you were expecting to see.

At the center of Bitsight asset and entity attribution is our proprietary Internet mapping service, Bitsight Graph of Internet Assets (GIA). Bitsight GIA utilizes a graph data structure to represents the union of massive datasets, enabling us to rapidly identify relationships between assets, entities, networks, and threats. Once we can associate a network asset with an entity, we use the entity’s associated industry information in Groma Explorer.

Service provider organizations (typically Technology and Telecommunications) are disproportionally represented in the results given their upstream ownership of end-user infrastructure.

Groma Explorer only includes data on CVEs that are observable on the public Internet. Many CVEs affect software that is never exposed to any network; these are not part of Groma Explorer’s data.

Groma Explorer aggregates Internet scanning data from the past 30 days. When new vulnerabilities are published, it takes a little time to update Groma to detect them.

You can use Groma Explorer to immediately gauge the impact of new CVEs by searching for observations of the affected software.