Attack Surface Management
Discovering, monitoring, and reducing external attack vectors.
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
Zafran Security
New York and Tel Aviv-founded exposure management company that maps attack paths across existing security tools to focus…
Doppel
San Francisco AI-native digital risk protection platform that detects and automatically takes down phishing sites, impersonation accounts, and…
IONIX
EASM vendor, formerly Cyberpion, that maps not just an organization's own internet-facing assets but the chain of third-party…
Frenos
Autonomous OT and ICS security assessment platform that runs digital-twin-based simulated penetration tests to continuously validate attack paths…
Detectify
Stockholm-based EASM and DAST platform that feeds its scanner with vulnerability research crowdsourced from a network of ethical…
Lansweeper
IT asset discovery and attack surface visibility platform that inventories on-prem, cloud, OT, and remote devices to expose…
Assetnote (Searchlight Cyber)
Offensive-security-researcher-built EASM platform from Brisbane, profitable and self-funded until its 2025 acquisition by dark-web intelligence firm Searchlight Cyber.
runZero
An agentless, credential-less asset discovery and exposure management platform — formerly Rumble Network Discovery — built by Metasploit…
Axonius
Cyber asset attack surface management platform that aggregates data from existing tools through API integrations to build a…
Absolute Security
Firmware-embedded endpoint resilience platform that detects and automatically restores security agents and device configurations across a device fleet,…
Cylera
Cylera provides a healthcare IoT and IoMT security platform that discovers and risk-scores connected medical devices using a…
NetSPI
Penetration-testing-as-a-service and attack surface management platform pairing human-led offensive security testing with continuous tracking.
Allure Security
AI-native digital brand protection with active decoy defense against phishing and impersonation.
Reflectiz
Agentless web exposure management platform that monitors third-party scripts, pixels, and open-source components on live websites to catch…
CyCognito
External exposure management platform that discovers, tests and prioritizes internet-facing security issues from an attacker's perspective.
JupiterOne
Graph-based cyber asset attack surface management (CAASM) platform that continuously maps assets, identities, and their relationships across cloud,…
Asimily
IoT and Internet of Medical Things (IoMT) risk management platform that inventories, classifies, and continuously monitors connected devices…
Flare
Threat exposure management platform monitoring clear and dark web, stealer logs and illicit channels for exposed credentials and…
ETHIACK
A Portuguese vendor running continuous, AI-driven autonomous pentesting alongside human ethical hackers to validate exploitable vulnerabilities across an…