cyberatlas-finder

Python client & CLI for CyberAtlas Finder — passive subdomain enumeration across ~3B domain names (certificate transparency + DNS, no brute force). Wildcard patterns, exact counts, one API call.

Install

pip install cyberatlas-finder

Quickstart

from cyberatlas_finder import Finder

finder = Finder()                          # anonymous — no key needed
print(finder.count("*.gitlab.*"))          # total "gitlab" subdomains

for host in finder.iter_domains("*gitlab*.io", max_results=50_000):
    print(host)                            # paging handled for you

# more volume? Finder(api_key="ca_live_...") or set CYBERATLAS_API_KEY

Patterns

CLI

cyberatlas-finder "*.gitlab.*"                 # first page
cyberatlas-finder "*.gitlab.*" --count         # total only
cyberatlas-finder "*gitlab*.io" --all --json   # stream everything

Limits

Free & anonymous: 60 req/min per IP · 2,000 lookups/day · 10B search operations/day. An API key raises the limits — cyberatlas.ai/finder.

Manual pagination

iter_domains() pages for you. To drive it yourself (e.g. checkpoint the cursor):

cursor = None
while True:
    page = finder.search("*.gitlab.*", per_page=500, cursor=cursor)
    for host in page.domains:
        print(host)
    if not page.has_more:
        break
    cursor = page.next_cursor

API

• Finder(api_key=None, timeout=30, max_retries=3)
• .search(pattern, *, page, per_page, cursor, tld, live, full) -> SearchPage
• .count(pattern, **filters) -> int
• .iter_domains(pattern, *, per_page=500, max_results=None, **filters)
• Errors: AuthError, RateLimitError, QuotaExceeded, InvalidPattern

MIT · a product of cyberatlas.ai