Modat Magnify: Expanded Protocol Visibility and Large-Scale Investigation Tools

The Hague  ·  March 20, 2026  ·  Product Update

This release improves search precision, expands protocol visibility, and introduces tools for more efficient large-scale investigations. Here is what is new.

New Protocols Added to Service Search

Two new protocols are now supported in Service Search, broadening coverage of network infrastructure:

• SOCKS5: Identify and investigate SOCKS5 proxy services exposed on the internet.

• mDNS: Discover hosts advertising services over Multicast DNS, commonly found in local network environments exposed to the public internet.

New Tags

Three new tags have been added to improve asset classification and technology discovery during investigations:

• Proxy Server (All plans): Identify proxy server infrastructure across the dataset.

• AI Framework (Professional): Surface hosts running AI and machine learning frameworks.

• WebSocket (Professional): Identify services with WebSocket support for more targeted application-layer investigation.

Certificate Trust & Self-Signed Filtering

TLS certificate searches now support clearer filtering with the cert.is_self_signed and cert.is_trusted flags. You can quickly distinguish between self-signed, CA-signed, and publicly trusted certificates, making certificate assessment faster and more targeted.

Improved History Compare  (Enterprise)

The History Compare feature has been enhanced to make historical analysis more intuitive. Changes between scans are now more clearly surfaced, including certificate updates, making it easier to track infrastructure changes over time and identify what has shifted between observations.

Bulk Export  (Enterprise)

Bulk Export is now available, enabling large-scale asset exports directly from the platform. Accessible via both the API and frontend, it supports exporting up to one million assets per request. This enables streamlined data analysis, enrichment workflows, and integration with internal tooling without manual data collection.

Alias for the “=” Operator

The : character is now supported as an alias for the = operator in queries. This gives analysts flexibility in how they write queries, accommodating different syntax preferences while producing identical results.

Multiple IP Search

You can now search for multiple IP addresses in a single query using list-based syntax. For example, IP={IP1, IP2, IP3} is equivalent to combining individual IP queries with OR, but far more concise. This simplifies workflows when investigating multiple known assets at once.

All features are live on the platform now. Explore them at magnify.modat.io or reach out to the team at support@modat.io with any questions.