Modat Magnify: Deeper Investigation, Smarter Search

The Hague  ·  January 23, 2026  ·  Product Update

This release focuses on investigation depth, search precision, and analysis speed. Here is what is new in Modat Magnify.

Unified IP Detail View

IP address investigation is now faster with a single consolidated view. All services are presented on one scrollable page, so you no longer need to navigate between port pages to get the full picture of a host.

Time-Based Filtering

You can now limit search results to specific time windows relative to when a query is executed. Flexible time units let you narrow results to what was observed recently, useful for tracking emerging infrastructure or confirming active exposure.

New Tags  (Business and Enterprise only)

Two new service tags have been added to improve asset classification and discovery during investigations:

VPN and PQC over SSH — helping identify VPN endpoints and post-quantum cryptography implementations over SSH more efficiently.

Certificate Validity Search

TLS certificates can now be filtered by validity period. This makes it straightforward to surface expired certificates, certificates that are not yet valid, or anomalous lifetimes that may indicatemisconfiguration or malicious infrastructure.

Certificate Common Name Wildcard Search

Wildcard and partial matching are now supported on subject and issuer Common Names. This is particularly useful for uncovering related infrastructure and for finding all certificates issued under a domain pattern or by a specific issuer without requiring an exact match.

Issuer Alternative Name (IAN) Search

Certificates can now be queried by their Issuer Alternative Name fields, including DNS names, IP addresses, URIs, directory names, and email addresses. This adds another pivot point for tracing certificate infrastructure back to its issuing authority.

Empty Field Search

A new query type lets you search for missing or empty fields using field="" across web content, TLS, SSH, banners, and metadata. This is useful for identifying incomplete or misconfigured assets that may represent unmonitored exposure.

TLS Version Filtering

Hosts and services can now be filtered by supported TLS versions. This makes it easier to surface outdated or insecure TLS configurations at scale, a key step in exposure management and complianceworkflows.

Banner Hex Search

Banners can now be searched using hexadecimal representations, enabling exact matching of raw or binary banner data. This is especially useful when working with non-printable characters or protocol-level fingerprinting that would be difficult to express as plain text.

All features are live on the platform now. Explore them at magnify.modat.io or reach out to the team at support@modat.io with any questions.