New! Search Censys for Prometheus Endpoints

**Executive summary:** This post reports that Censys has identified roughly 8,500 Prometheus (port 9090) instances exposed to the Internet, outlines the risks of sensitive data exposure and service disruption from publicly accessible Prometheus endpoints, and provides actionable guidance to defenders: locate exposed instances using Censys, remove or privatize any that do not need Internet access, restrict administrative access, and protect Prometheus behind a reverse proxy implementing authentication and TLS.