Attack Surface Management
Discovering, monitoring, and reducing external attack vectors.
Censys
Internet intelligence and attack surface management platform built on continuous scanning of internet-facing hosts and certificates.
Recorded Future Attack Surface Intelligence
Attack surface visibility module from Recorded Future's broader threat intelligence platform, correlating discovered assets with real-time threat-actor and…
CloudEagle.ai
Y Combinator-backed SaaS and AI governance platform that jumped to Leader status in Gartner's 2026 Magic Quadrant for…
Tenable
Exposure management platform, Tenable One, unifying vulnerability scanning, cloud, identity and attack surface risk.
NetRise
An Austin binary-level firmware and software supply-chain security specialist acquired by Accenture in 2026.
The Media Trust
A McLean, Virginia-based digital trust and safety vendor that continuously scans the ad-tech and website supply chain for…
ProjectDiscovery
Security company behind the widely used open-source Nuclei vulnerability scanner, now offering a commercial cloud platform for AI-assisted…
ThreatAware
London-based cyber asset management platform that continuously verifies device inventory and security control coverage, reaching profitability and 100+…
ZeroFox
A publicly traded external cybersecurity platform combining threat intelligence, brand protection, and attack surface intelligence to disrupt threats…
SynerComm
SynerComm combines proprietary Continuous Attack Surface Management (CASM) technology with human-led penetration testing playbooks for ongoing, rather than…
Redinent
Redinent is a Bengaluru-based deep-tech startup that discovers and secures unmanaged IoT and OT devices, such as CCTV…
Edgescan
A Dublin-based, Series B-funded continuous exposure validation platform combining external attack surface management, risk-based vulnerability management, and penetration-testing-as-a-service…
Cyesec
A PE-backed Israeli exposure-management vendor combining attack-path automation with human-led pen testing.
XBOW
A Seattle autonomous AI pentesting platform that topped HackerOne's public leaderboard in 2025.
Zynap
A Barcelona-based, well-funded early-stage vendor combining stolen-credential monitoring, attack surface visibility, and AI-driven automated response into a single…
Balbix (a SAFE Security company)
AI-driven cyber asset attack surface management and risk-based vulnerability management platform, acquired by SAFE Security in November 2025.
SecurityScorecard
New York-based security ratings pioneer providing outside-in cyber risk scores and third-party/supply-chain risk management for enterprise vendor portfolios.
AI SPERA
South Korean cybersecurity firm behind Criminal IP, an OSINT search engine and attack surface management platform for external…
UpGuard
Cyber risk posture management platform combining external attack surface scanning with vendor/third-party risk ratings in one product.
Bugcrowd
AI-assisted crowdsourced security platform spanning bug bounty, vulnerability disclosure, pentest-as-a-service and attack surface management.
Queue-it
Queue-it is a global provider of online traffic orchestration technology, best known for its virtual waiting room product…
Sevco Security (an Arctic Wolf company)
Cyber asset attack surface management (CAASM) platform that evolved into a broader exposure assessment platform, acquired by Arctic…
Hadrian
Amsterdam-based attack surface management platform that uses autonomous, AI-driven "hacker" agents to continuously discover, exploit-test and prioritize internet-facing…
SixMap
Attack surface management startup using computational internet mapping to discover an organization's internet-facing assets across all 65,535 ports…