Skip to content
Modat Try Magnify
← Back to Blog
Product Update 23 Jan 2026

Modat Magnify: Deeper Investigation, Smarter Search

This release focuses on investigation depth, search precision, and analysis speed: here's what's new in Modat Magnify, from a unified IP detail view to certificate validity search.

Modat Magnify: Deeper Investigation, Smarter Search

This release focuses on investigation depth, search precision, and analysis speed. Here is what is new in Modat Magnify.

Unified IP Detail View

IP address investigation is now faster with a single consolidated view. All services are presented on one scrollable page, so you no longer need to navigate between port pages to get the full picture of a host.

Time-Based Filtering

You can now limit search results to specific time windows relative to when a query is executed. Flexible time units let you narrow results to what was observed recently, useful for tracking emerging infrastructure or confirming active exposure.

New Tags (Business and Enterprise only)

Two new service tags have been added to improve asset classification and discovery during investigations: VPN and PQC over SSH, helping identify VPN endpoints and post-quantum cryptography implementations over SSH more efficiently.

TLS certificates can now be filtered by validity period. This makes it straightforward to surface expired certificates, certificates that are not yet valid, or anomalous lifetimes that may indicate misconfiguration or malicious infrastructure.

Wildcard and partial matching are now supported on subject and issuer Common Names. This is particularly useful for uncovering related infrastructure and for finding all certificates issued under a domain pattern or by a specific issuer without requiring an exact match.

Certificates can now be queried by their Issuer Alternative Name fields, including DNS names, IP addresses, URIs, directory names, and email addresses. This adds another pivot point for tracing certificate infrastructure back to its issuing authority.

A new query type lets you search for missing or empty fields using field="" across web content, TLS, SSH, banners, and metadata. This is useful for identifying incomplete or misconfigured assets that may represent unmonitored exposure.

TLS Version Filtering

Hosts and services can now be filtered by supported TLS versions. This makes it easier to surface outdated or insecure TLS configurations at scale, a key step in exposure management and compliance workflows.

Banners can now be searched using hexadecimal representations, enabling exact matching of raw or binary banner data. This is especially useful when working with non-printable characters or protocol-level fingerprinting that would be difficult to express as plain text.

All features are live on the platform now. Explore them at magnify.modat.io or reach out to the team at support@modat.io with any questions.

Intent leaves a trace.

Talk to us about your needs