Attack Surface Management
Discovering, monitoring, and reducing external attack vectors.
Queue-it
Queue-it is a global provider of online traffic orchestration technology, best known for its virtual waiting room product…
Sevco Security (an Arctic Wolf company)
Cyber asset attack surface management (CAASM) platform that evolved into a broader exposure assessment platform, acquired by Arctic…
Hadrian
Amsterdam-based attack surface management platform that uses autonomous, AI-driven "hacker" agents to continuously discover, exploit-test and prioritize internet-facing…
Detectify
Stockholm-based web application scanning and external attack surface monitoring platform powered by research from ethical hackers.
LocateRisk
LocateRisk is a German external attack surface management and vendor risk management platform that combines automated asset discovery…
Rapid7 Surface Command
Rapid7's unified asset and attack surface visibility product, combining external attack surface monitoring with internal cyber asset management…
Element Security
Tel Aviv-based external attack surface management platform, formerly known as Ovalsec, that combines continuous exposure discovery with active…
Viakoo
IoT and cyber-physical systems security platform that discovers and automates remediation of firmware, password, and certificate vulnerabilities on…
Reveald
Reveald orchestrates continuous threat exposure management, correlating findings from an organization's existing security tools into a prioritized, attack-path-based…
Tonic Security
Israeli startup founded by Sygnia and Unit 8200 veterans, building an AI-driven exposure management platform to prioritize what…
RapidFort
A Sunnyvale software-supply-chain security company that closed a $42M Series A and claims 60-90% attack-surface reduction.
RedSeal
Network exposure management platform that models hybrid network topology to compute attack paths and prioritize exposures across IT,…
Patrowl
French SaaS platform combining external attack surface management with pentest-as-a-service, built by former auditors to continuously discover and…
Cybersixgill (a BitSight company)
Deep and dark web threat intelligence platform providing automated, real-time monitoring of criminal forums and marketplaces, acquired by…
GreyScout
A Dublin-based digital risk protection platform that automates detection, verification, and takedown of counterfeit listings and brand impersonation…
Microsoft Defender External Attack Surface Management
Microsoft's EASM product, built on acquired RiskIQ technology, that maps internet-facing assets for organizations already using the Microsoft…
FireCompass
A Boston-based SaaS platform for Continuous Automated Red Teaming and external attack surface management, continuously indexing an organization's…
RiskRecon
Salt Lake City-founded, Mastercard-owned continuous cyber risk rating platform for third-party and supply-chain risk management.
Styx Intelligence
Vancouver-based digital risk protection platform that detects and takes down brand impersonation, phishing sites, and data leaks for…
CSC (DomainSec)
Enterprise-class domain security and DNS threat-intelligence platform from a 125-year-old corporate services firm trusted by 90% of the…
MarqVision
A West Hollywood, YC-backed brand-protection startup using generative AI to detect counterfeits and draft takedowns across 1,500+ marketplaces.
Ceeyu
A Belgian attack surface management and third-party risk platform combining continuous external scanning with compliance questionnaires, built around…
OctoXLabs
OctoXLabs is a cyber asset attack surface management (CAASM) platform that aggregates data from IT, cloud, and security…
Armadin
An AI red-teaming startup led by former Mandiant CEO Kevin Mandia, with a record-setting combined seed and Series…