Attack Surface Management
Discovering, monitoring, and reducing external attack vectors.
FortifyData
Cyber risk management platform combining attack surface management, third-party risk ratings, and compliance management, using active weekly scanning…
Bleach Cyber
A Techstars-backed platform that continuously scans a small business's connected tools and cloud accounts for exposure and automates…
Trickest
Offensive security automation platform that lets security teams build, automate and run reconnaissance and attack-surface workflows without heavy…
EBRAND
Luxembourg-based digital risk protection provider specializing in domain, brand-abuse, and phishing-site monitoring and takedown across a global external…
Crosslayer Labs
A Princeton-spinout startup that monitors DNS, BGP, TLS certificates, and JavaScript dependencies to detect website and API impersonation…
FYEO
A Denver-based threat intelligence and exposure monitoring vendor that pairs conventional dark-web/credential monitoring with blockchain and DeFi security…
Sweepatic
Belgian external attack surface management vendor that has quietly run continuous internet-facing asset discovery for enterprise clients since…
Apexa iQ
An agentless asset assurance and attack surface management platform that unifies IT asset visibility with vulnerability, compliance, and…
ThreatMate
MSP-focused platform combining attack surface discovery, automated penetration testing, and CISA-aligned configuration auditing into one risk-identification tool.
Menaya
Menaya (the rebranded GamaSec) runs an AI-powered external attack surface management platform that discovers and continuously scores an…
Indurex
An Amsterdam startup from the founder of Applied Risk, unifying safety, process, and cybersecurity data into one view…
ThreatNG Security
Agentless external attack surface management platform combining EASM, digital risk protection and security ratings in a single unauthenticated-discovery…
RedMimicry
Berlin startup building a breach-and-attack-simulation platform that emulates real adversary malware and TTPs to validate detection and response.
CyberCyte
A Reading, UK-based exposure management platform combining CAASM-style asset visibility, GRC automation and forensic threat hunting for enterprise…
Driftnet
A UK internet-scanning pioneer founded by a former government researcher, acquired by SecurityScorecard.
AgenticSec
A Tokyo autonomous AI penetration-testing startup that became LayerX's first acquisition.
Attaxion
External attack surface management vendor focused on agentless, wide-coverage asset discovery and continuous exposure monitoring for mid-market security…
Bridgepoint
A listed London private equity firm with majority stakes in Lansweeper and iC Consult and a stake in…
Rotate
An MSP-native security platform acquired by Check Point in February 2026 to anchor its Workspace Security division.
Zero Point Security
A bootstrapped UK red-team and C2 training brand acquired by Fortra in April 2026.
Buguard
Buguard is an Egypt-founded offensive security startup offering continuous attack surface and dark web monitoring (Dark Atlas) alongside…
Arcane Security
A Phoenix AI-driven offensive-security firm with mandatory human validation, acquired by SafeHill in March 2026.
Kaduu
Swiss dark web and deep web monitoring provider that alerts organizations when their credentials, data or brand assets…
TIKAJ
US/India-based platform combining external attack surface management, phishing simulation, brand monitoring and dark web takedown services in one…