Attack Surface Management
Discovering, monitoring, and reducing external attack vectors.
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
Doppel
San Francisco AI-native digital risk protection platform that detects and automatically takes down phishing sites, impersonation accounts, and…
IONIX
EASM vendor, formerly Cyberpion, that maps not just an organization's own internet-facing assets but the chain of third-party…
Assetnote (Searchlight Cyber)
Offensive-security-researcher-built EASM platform from Brisbane, profitable and self-funded until its 2025 acquisition by dark-web intelligence firm Searchlight Cyber.
Frenos
Autonomous OT and ICS security assessment platform that runs digital-twin-based simulated penetration tests to continuously validate attack paths…
Detectify
Stockholm-based EASM and DAST platform that feeds its scanner with vulnerability research crowdsourced from a network of ethical…
Lansweeper
IT asset discovery and attack surface visibility platform that inventories on-prem, cloud, OT, and remote devices to expose…
Axonius
Cyber asset attack surface management platform that aggregates data from existing tools through API integrations to build a…
Absolute Security
Firmware-embedded endpoint resilience platform that detects and automatically restores security agents and device configurations across a device fleet,…
runZero
An agentless, credential-less asset discovery and exposure management platform — formerly Rumble Network Discovery — built by Metasploit…
Cylera
Cylera provides a healthcare IoT and IoMT security platform that discovers and risk-scores connected medical devices using a…
NetSPI
Penetration-testing-as-a-service and attack surface management platform pairing human-led offensive security testing with continuous tracking.
Asimily
IoT and Internet of Medical Things (IoMT) risk management platform that inventories, classifies, and continuously monitors connected devices…
JupiterOne
Graph-based cyber asset attack surface management (CAASM) platform that continuously maps assets, identities, and their relationships across cloud,…
Flare
Threat exposure management platform monitoring clear and dark web, stealer logs and illicit channels for exposed credentials and…
Allure Security
AI-native digital brand protection with active decoy defense against phishing and impersonation.
Reflectiz
Agentless web exposure management platform that monitors third-party scripts, pixels, and open-source components on live websites to catch…
CyCognito
External exposure management platform that discovers, tests and prioritizes internet-facing security issues from an attacker's perspective.
Recorded Future Attack Surface Intelligence
Attack surface visibility module from Recorded Future's broader threat intelligence platform, correlating discovered assets with real-time threat-actor and…
ETHIACK
A Portuguese vendor running continuous, AI-driven autonomous pentesting alongside human ethical hackers to validate exploitable vulnerabilities across an…