Attack Surface Management
Discovering, monitoring, and reducing external attack vectors.
Armadin
An AI red-teaming startup led by former Mandiant CEO Kevin Mandia, with a record-setting combined seed and Series…
Shodan
The original internet-connected-device search engine, widely used by security researchers and enterprise teams to discover exposed systems and…
Halo Security
Small, San Francisco-originated EASM platform combining external asset discovery with penetration-testing services, descended from the earlier ScanAlert/TrustedSite lineage.
Accenture
A global systems integrator buying scaled security capability via CyberCX, a $4.175B Dragos stake, runZero, and NetRise.
Sola Security
Builds a vendor-agnostic 'Security Brain' context layer that unifies data across security tools so human analysts and AI…
Intruder
Continuous vulnerability scanning and attack-surface monitoring platform built for lean security teams without dedicated SOC staff.
Cavelo
Channel-first data security posture management (DSPM) and attack surface management platform built for MSPs and MSSPs to discover,…
WiseBee
A New York/Sofia-based pre-seed startup building AI agents that combine attack surface monitoring, threat intelligence and vendor risk…
ThingsRecon
An Amsterdam startup mapping external attack surface and multi-tier supplier risk from a single starting domain using a…
Strobes Security
Continuous threat exposure management platform unifying attack surface management, penetration-testing-as-a-service and risk-based vulnerability management.
BRANDEFENSE
BRANDEFENSE is a Turkey-based AI-driven Digital Risk Protection Services (DRPS) platform that monitors the surface, deep, and dark…
Tenable Attack Surface Management
Tenable's EASM capability, built from its 2022 acquisition of Bit Discovery, now integrated into the broader Tenable One…
Qualys CyberSecurity Asset Management (EASM)
Qualys's EASM capability, integrated into its CyberSecurity Asset Management product, that unifies internal and external asset visibility on…
Bug Bounty Switzerland
A profitable Lucerne ethical-hacker orchestration platform trusted by Switzerland's Federal Office for Cybersecurity.
RedHunt Labs
A London-founded external attack surface and continuous threat exposure management platform used by Indian fintech and consumer tech…
Astelia
A Tel Aviv exposure-management platform founded by former leaders of Israel's National Red Team, backed by Index Ventures…
DeviceTotal
Tel Aviv-based agentless device risk intelligence platform, positioned as 'VirusTotal for devices,' scoring IoT, OT, and network device…
Sedara
Buffalo-based managed security provider built on Elasticsearch, delivering attack surface visibility and threat detection/response as a hands-on 'cybersecurity…
FoxTech Cyber
UK-based cybersecurity services firm combining OSINT-driven attack surface discovery with managed SIEM and human-led penetration testing.
K2 Integrity
A New York risk advisory firm that added offensive-security capability by acquiring Leviathan Security Group in March 2026.
C2SEC
C2SEC offers an Extended Security Posture Management (XSPM) SaaS platform combining external attack surface management, cloud posture, and…
Faraday Security
Offensive security platform that orchestrates over 80 third-party security tools into a single vulnerability management and external attack…
Randori (IBM)
Hacker-founded attack surface management and continuous automated red-teaming platform acquired by IBM in 2022 and folded into its…
Guardian360
Dutch, self-funded external attack surface management platform combining continuous asset discovery, vulnerability scanning, and NCSC threat-intel feeds for…