FullHunt

FullHunt is an internet intelligence platform for discovering and monitoring internet-facing assets, with APIs, data feeds, and MCP for security workflows. It suits security vendors, enterprise teams, and MSSPs that need asset and vulnerability context at scale. Its free tier offers a small evaluation allowance; meaningful ongoing use requires a paid plan, and redistribution requires an OEM tier.

Overview

FullHunt brings asset discovery, continuous exposure monitoring, and vulnerability intelligence together. It can identify domains, subdomains, IPs, cloud services, ports, technologies, and certificates, then track changes and surface exposure alerts. Its CVE mapping adds exploit context, EPSS scores, and CISA KEV status to observed assets, making it more useful for prioritizing security work than an inventory alone.

The maker reports more than 2 billion indexed internet hosts, over 800 million CVE-to-host mappings, and a 24-hour average data freshness cycle. These figures indicate broad coverage, though the product's monitoring is continuous while its underlying data freshness is reported on a different cadence. Use requires explicit lawful authority to monitor and scan submitted assets and a defensive or otherwise legitimate cybersecurity purpose.

Key features

Discovery and monitoring

External and cloud asset discovery, attack-path analysis, and continuous monitoring cover a broad range of internet-facing infrastructure. Tracking new assets, service and certificate changes, configuration drift, and exposure alerts is a practical fit for teams that need to keep an evolving attack surface in view.

Vulnerability and threat context

Mapping CVEs to observed assets and enriching them with exploit context, EPSS scores, and CISA KEV status helps security teams distinguish exposed assets from more urgent risks. Enterprise workflows can also monitor compromised credentials, infostealer activity, typosquatting, and phishing infrastructure tied to monitored organizations.

Integration and developer access

Integrations include Splunk, Sumo Logic, Cortex XSOAR, FortiSOAR, Mindflow, Jira, ServiceNow, Slack, Microsoft Teams, and custom webhooks. REST APIs, a Python SDK, and MCP tools support product and workflow integration. API plans charge one credit per request and reset credits monthly, so usage-heavy integrations need a plan sized for their request volume.

Pricing

FullHunt is freemium, with a 14-day trial and paid plans starting at $149 a month. The trial is for qualified organizations on Enterprise; it is not described as a general trial across plans.

• Free — free: 10 credits/month for evaluation and internal use, covering discovery, enrichment, exposure, and vulnerability/exploit intelligence. The low allowance makes this a way to assess fit, not a substantial operating tier.
• Builder — $149 a month, billed monthly: 500 credits/month, on-demand scanning, exposure monitoring, and change alerts. It suits smaller internal workflows, but excludes commercial use and redistribution.
• Scale — $1,499 a month, billed monthly: 10,000 credits/month, active and passive vulnerability scanning, historical and passive DNS data, up to 80 company allowlists, and commercial use. It is the step up for commercial operations that need more scanning and asset history.
• OEM Starter — $5,500 a month: 30,000 credits/month, up to 100 company allowlists, all features, dedicated OEM APIs, redistribution rights, dedicated support, and an SLA. This is aimed at vendors embedding or reselling FullHunt data.
• OEM Growth — $9,600 a month: 60,000 credits/month, up to 200 company allowlists, all features, dedicated OEM APIs, redistribution rights, dedicated support, and an SLA. It provides more capacity and allowlists than OEM Starter.
• FullHunt Enterprise — starting at $19,000 a year: Quoted per organization based on monitored assets, feature modules, seats, and support; standard deployments cover up to 400,000 assets, with a 14-day trial for qualified organizations. This is the organization-scale option where scope and support need tailoring.
• OEM Enterprise — custom pricing: $20K to $35K/Month, with custom credits, unlimited company allowlists, all features, dedicated OEM APIs, full redistribution rights, dedicated support, and an SLA. It fits the largest redistribution needs.

Free and Builder are restricted to internal use; Scale permits commercial use, while OEM tiers include redistribution rights. Those distinctions matter as much as credit limits when choosing a tier.

Platforms

FullHunt is available on web and through an API. Its REST APIs, Python SDK, and MCP tools make it particularly relevant to teams integrating intelligence into security products or internal workflows.

Who it's for

Security vendors and builders can use the API and OEM tiers to incorporate asset intelligence into products, while enterprise security teams can monitor their own external exposure. MSSPs managing client environments may benefit from company allowlists and higher-credit tiers. Organizations seeking a lightweight standalone scanner, or commercial users unwilling to move beyond Builder's internal-use terms, should look elsewhere.

Pros and cons

• Pros: Discovery, continuous change monitoring, and vulnerability context are combined, helping teams connect exposed assets with actionable risk signals.
• Pros: Broad integrations and developer access support use in existing security stacks and product workflows.
• Pros: Scale and OEM tiers explicitly provide commercial-use or redistribution rights, with increasing credits and allowlists for larger operations.
• Cons: Free is limited to 10 credits/month, and Builder's 500 credits/month cannot be used commercially or for redistribution.
• Cons: Higher-volume use becomes a substantial commitment: Scale is $1,499 a month, and OEM plans start at $5,500 a month.
• Cons: Enterprise pricing varies with assets, modules, seats, and support, so organizations need a quote to establish their cost.

Alternatives

For a broader category comparison, see Attack Surface Management Software.

• ZeroFox Attack Surface Intelligence is an API and web option with tailored, quote-based pricing; consider it when a tailored package is preferable to FullHunt's published tiers.
• CyCognito Platform prices by active IPs and web applications across asset-scale bands from up to 5,000 to 100,001+; consider it when that scale-based pricing approach fits your environment.
• Detectify Surface Monitoring is a paid web product with a free plan; consider it if a web-based option with a free tier better suits your needs.
• Censys Attack Surface Management uses quote-required pricing based on assets under management; consider it if AUM-based quoting suits your purchasing process.
• Tenable One Attack Surface Management supports Linux, macOS, web, and Windows, with unified visibility across IT, cloud, web applications, and OT; consider it if that broader environment coverage is the priority.
• Qualys External Attack Surface Management offers a 30-day no-cost CSAM with EASM plan; consider it if a time-limited evaluation is more useful than FullHunt's ongoing free allowance.
• CrowdStrike Falcon Surface is another paid option with a free trial; consider it if you want to evaluate an alternative before committing.
• Outpost24 Attack Surface Management offers customized packages based on cybersecurity goals, teams, and timelines; consider it when that kind of tailored package is preferable.

Verdict

FullHunt is a strong fit for security teams, MSSPs, and security product builders that need broad external asset discovery, continuous exposure tracking, and vulnerability context through APIs. Its central advantage is the combination of these capabilities with integration and OEM options. Look elsewhere if you need substantial free usage, commercial rights at the entry tier, or a predictable low-cost plan.