External attack surface management
Continuous discovery and monitoring of an organization's internet-facing assets from an outside-in view.
12 vendors · alphabetical, never ranked
- Arctic WolfArctic Wolf sells managed detection and response along with exposure management, incident response, security awareness training and threat intelligence services.Ownership not established
- Bishop FoxBishop Fox sells offensive security services, including penetration testing, red team engagements and continuous attack surface management.Ownership not established
- CensysCensys sells an internet intelligence platform used for threat hunting and exposure management, built on a dataset of internet-connected hosts and devices.Ownership not established · primary category
- CybleCyble sells threat intelligence products that monitor the surface, deep and dark web, along with a breach-check tool and an internet scanning tool.Ownership not established
- CyCognitoCyCognito sells a platform that discovers and tests an organization's internet-facing assets by simulating an attacker's view, then prioritizes exploitable and urgent findings.Ownership not established · primary category
- DetectifyDetectify sells an application security platform that tests an organization's external attack surface, drawing on vulnerability data contributed by ethical hackers.Owned by Insight Partners since 2024
- EscapeEscape sells an offensive security platform that combines business-logic-aware dynamic application security testing, AI-driven penetration testing, and external network pentesting, originally built around API security.Privately held
- KaiKai, legally Kai Cyber, Inc., sells an agentic AI platform that identifies security exposures, assesses which ones represent real risk, and remediates them across threat intelligence, exposure management, detection and response.Privately held
- Red SiftRed Sift sells a security platform built around DMARC, SPF, and DKIM email authentication, with added modules for TLS certificate monitoring, brand and domain impersonation detection, and external attack surface discovery.Privately held
- runZerorunZero sells a cyber asset attack surface management platform that discovers IT, OT and IoT assets through active scanning, passive discovery and integrations with other tools, without needing agents or credentials on those assets.Owned by Dragos since 2026
- UpGuardUpGuard sells a cyber risk posture management platform covering vendor risk, attack surface monitoring, workforce human risk, trust-page questionnaire automation and risk automations.Privately held
- ZeroFoxZeroFox sells a platform that combines external attack surface management, digital risk protection and threat intelligence.Owned by Haveli Investments since 2024
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.