Driftnet
A UK internet-scanning pioneer founded by a former government researcher, acquired by SecurityScorecard to power real-time, threat-informed third-party risk management with deeper internet-infrastructure visibility.
+ Add to CompareInnovation Matrix Assessment
Built a pioneering global internet-scanning search engine with research-grade technical depth in infrastructure visibility.
No named customers or independently verifiable scan-coverage scale were disclosed prior to the acquisition.
Acquired by SecurityScorecard, the self-described global TPRM leader, in May 2026 to power real-time threat-informed risk management.
Real-time internet scanning for hidden vendor exposures meaningfully improves on periodic, questionnaire-based third-party risk assessment.
No independently verifiable customer names or exposure-detection outcome metrics were disclosed.
Continuous, real-time visibility into third-party exposure is an increasingly critical gap in supply-chain risk management.
Why CISOs Should Care
Driftnet gives third-party risk teams real-time internet-scanning visibility into vendors' hidden exposures -- exposed services, misconfigurations, shadow infrastructure -- that periodic questionnaire-based vendor assessments miss entirely.
What Makes It Different
Driftnet was founded by a longtime UK government researcher and built as a pioneer internet-scanning search engine, giving it a research-grade technical pedigree in global internet-scanning distinct from typical commercial attack-surface-management vendors.
The Matrix Verdict
43/100 — EMERGING / UNRANKED
A UK internet-scanning pioneer founded by a former government researcher, acquired by SecurityScorecard to power real-time, threat-informed third-party risk management with deeper internet-infrastructure visibility.
Editorial Note: Claims vs. Verified Findings
The founder's background as a 'longtime United Kingdom government researcher' is reported directly by Dark Reading and other outlets covering the deal; specific customer names or scan-coverage figures were not disclosed.
Sources
Alternatives to Driftnet
Unknown Cyber Inc.
Malware genomics platform using automated deep static analysis and code-lineage comparison to identify unseen malware, variants, and supply-chain…
Synack Inc
A penetration-testing-as-a-service platform pairing a vetted researcher community with AI-driven attack surface discovery for continuous security validation.
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
Horizon3.ai
Autonomous penetration testing company whose NodeZero platform self-attacks networks without persistent agents, aiming to replace annual manual pentests…
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…