Attack Surface Management
Discovering, monitoring, and reducing external attack vectors.
15 companies ranked by Innovation Matrix score.
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
IONIX
EASM vendor, formerly Cyberpion, that maps not just an organization's own internet-facing assets but the chain of third-party…
Assetnote (Searchlight Cyber)
Offensive-security-researcher-built EASM platform from Brisbane, profitable and self-funded until its 2025 acquisition by dark-web intelligence firm Searchlight Cyber.
Detectify
Stockholm-based EASM and DAST platform that feeds its scanner with vulnerability research crowdsourced from a network of ethical…
Palo Alto Networks Cortex Xpanse
DARPA-derived internet scanning platform, now Palo Alto Networks' EASM module, that continuously maps and attributes internet-facing assets.
Recorded Future Attack Surface Intelligence
Attack surface visibility module from Recorded Future's broader threat intelligence platform, correlating discovered assets with real-time threat-actor and…
Mandiant Attack Surface Management (Google Cloud)
Google Cloud's attack surface management product, drawing on Mandiant's incident-response and threat-intelligence pedigree to prioritize exposures by real-world…
Rapid7 Surface Command
Rapid7's unified asset and attack surface visibility product, combining external attack surface monitoring with internal cyber asset management…
Microsoft Defender External Attack Surface Management
Microsoft's EASM product, built on acquired RiskIQ technology, that maps internet-facing assets for organizations already using the Microsoft…
Tenable Attack Surface Management
Tenable's EASM capability, built from its 2022 acquisition of Bit Discovery, now integrated into the broader Tenable One…
Qualys CyberSecurity Asset Management (EASM)
Qualys's EASM capability, integrated into its CyberSecurity Asset Management product, that unifies internal and external asset visibility on…
Randori (IBM)
Hacker-founded attack surface management and continuous automated red-teaming platform acquired by IBM in 2022 and folded into its…
Halo Security
Small, San Francisco-originated EASM platform combining external asset discovery with penetration-testing services, descended from the earlier ScanAlert/TrustedSite lineage.