External attack surface management
Continuous discovery and monitoring of an organization's internet-facing assets from an outside-in view.
36 vendors · alphabetical
- Arctic WolfArctic Wolf sells managed detection and response, cloud detection and response, managed security awareness and endpoint security, with a Concierge Security Team delivering the services.Ownership not established
- AttaxionAttaxion sells a platform that maps an organization's entire attack surface, identifies critical vulnerabilities and supports remediation with guided next steps and workflows.Ownership not established · primary category
- Bishop FoxBishop Fox sells offensive security services, including penetration testing and continuous security testing.Ownership not established
- BitsightBitsight delivers a map of assets and vulnerabilities across an enterprise and its supply chain, prioritized by real-time threat intelligence.Ownership not established
- BreachLockBreachLock sells human-delivered, AI-powered and automated testing for attack surface management, penetration testing as a service, and automated pentesting and red teaming, integrated into the BreachLock Platform.Ownership not established
- CensysCensys supports investigations with real-time Internet infrastructure visibility and historical context.Ownership not established · primary category
- ConnectSecureConnectSecure sells the ConnectSecure cybersecurity platform, which features what MSPs need to harden their clients’ attack surface and manage tightening compliance requirements.Ownership not established
- CybleCyble sells a unified threat intelligence platform covering dark web monitoring, attack surface management and brand protection.Ownership not established
- CyCognitoCyCognito sells a platform for external attack surface management that identifies and validates exposures across an organization's internet-facing assets.Ownership not established · primary category
- DetectifyDetectify is an application security platform that combines Dynamic Application Security Testing (DAST) and Attack Surface Management (ASM).Owned by Insight Partners since 2024
- EscapeEscape sells an offensive security platform that uses AI agents to discover, test and remediate vulnerabilities in engineering workflows.Privately held
- FlashpointFlashpoint sells threat data and intelligence that spans cyber threat intelligence, vulnerability intelligence, geopolitical risk, physical security, fraud and brand protection.Ownership not established
- Group-IBGroup-IB is a Prediction-First cybersecurity company built on collective defense.Ownership not established
- HadrianHadrian is an agentic AI offensive security platform that continuously discovers an organization's external attack surface and tests it for exploitable exposures.Privately held · primary category
- Halo SecurityHalo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together.Ownership not established
- Hive ProHive Pro sells The Hive Pro Platform, one platform offering threat exposure management through exposure assessment and adversarial exposure validation.Ownership not established
- IntruderIntruder sells a single platform for continuous scanning across infrastructure, apps and cloud environments.Ownership not established
- IONIXIONIX sells an External Exposure Management platform designed to discover, validate, and remediate external exposures across the full organizational footprint.Ownership not established · primary category
- JupiterOneJupiterOne is an AI Risk Management platform that continuously discovers every digital asset across an environment and maps the relationships between them.Ownership not established
- KaiKai is an AI company that sells the Kai Autonomous Defense Platform, an agentic AI platform for cyber asset management, application security, infrastructure vulnerability management, and detection engineering.Privately held
- LansweeperLansweeper sells software that gives IT and Security teams one shared view across IT, OT, cloud, and AI.Ownership not established
- NCC GroupNCC Group is a global cyber security and resilience company with over 2000 colleagues around the world.Ownership not established
- NetSPINetSPI sells pentesting as a service (PTaaS), attack surface management (ASM), and breach and attack simulation (BAS) as a service.Ownership not established
- Outpost24Outpost24 sells security products and services delivered through its cloud platform with automation supported by its cyber security experts.Ownership not established
- QualysQualys provides the Enterprise TruRisk Platform, an end-to-end solution for all aspects of IT, security and compliance.Ownership not established
- Rapid7Rapid7 sells the Command Platform, which runs cloud security, SIEM, application security, vulnerability management, automation and attack surface management solutions, along with managed services offerings built on these solutions.Ownership not established
- Reach SecurityReach Security is an AI-native security company focused on giving customers a single interface to understand and operate security controls at scale.Privately held
- Recorded FutureRecorded Future is a threat intelligence company that sells real-time intelligence and autonomous defense.Ownership not established
- Red SiftRed Sift helps security and IT teams embrace the security protocols that keep the internet safe, such as DMARC, SPF, DKIM and TLS.Privately held
- ReliaQuestReliaQuest sells GreyMatter, an agentic AI security operations platform that allows security teams to detect, contain, investigate and respond to threats, regardless of the data source.Ownership not established
- runZerorunZero is a security company that sells the runZero Platform, which provides security visibility across IT, OT, IoT, cloud, mobile and remote assets.Owned by Dragos since 2026
- SOCRadarSOCRadar sells an Extended Threat Intelligence (XTI) platform that organizations use to identify, analyze and mitigate cyber threats.Ownership not established
- TenableTenable sells Tenable One, a platform that unifies security visibility, insight and action across an attack surface.Ownership not established
- UpGuardUpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight.Privately held
- Zafran SecurityZafran Security sells a platform that brings vulnerability findings together across existing tools into a unified view of exposure across the hybrid enterprise.Ownership not established
- ZeroFoxZeroFox sells a fused cybersecurity platform that brings intelligence, AI, and cybersecurity experts together in one continuous loop of discovery, validation, and disruption.Owned by Haveli Investments since 2024