Group-IB Attack Surface Management
Group-IB Attack Surface Management is a cloud platform for discovering and monitoring an organization's internet-facing assets.
What Group-IB Attack Surface Management is
Group-IB Attack Surface Management is a cloud platform for discovering and monitoring an organization's internet-facing assets. Entering a domain lets it map infrastructure through relationships such as subdomains, SSL certificates, and DNS records. Teams can confirm or ignore discovered assets, maintain an external inventory, and track issues on confirmed assets through statuses including Under Review, Solved, Ignored, or False Positive. They can also create remediation tickets. Findings are enriched with threat intelligence covering activity such as credential dumps, phishing panels, malware deployment, and command-and-control traffic, helping teams assess risk and prioritize issues. The Standard License lists automated discovery, validation, risk assessment, ticketing, visual mapping, and graph research. The 3rd Party Risk plan adds customized third-party discovery and cyber risk scoring. A 21-day trial covers up to five domains and unlimited assets, with reports and API export, but only common-port scans. Pricing is on request and based on confirmed external assets.
Good
- Continuously discovers external assets.
- Maps infrastructure through domain-related records.
- Teams can track issues and create remediation tickets.
- Threat intelligence enriches confirmed assets.
- Trial includes reports and API data export.
Watch out
- Pricing is available on request only.
- Trial lasts 21 days.
- Trial covers up to five domains.
- Trial scanning is limited to common ports.
Who it suits
The platform suits enterprise security teams seeking visibility into external assets, vulnerabilities, and threats. Its 3rd Party Risk plan is aimed at teams assessing third-party cyber risk.
Verdict
Group-IB Attack Surface Management combines external asset mapping, issue workflows, and threat intelligence. The trial offers a way to assess its discovery and reporting within limits, while pricing depends on confirmed assets.
Plans and prices
From Group-IB Attack Surface Management's own pricing page, checked 30 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| 3rd Party Risk | Priced on request | Pricing based on total number of confirmed external assets |
| Standard | Priced on request | Pricing based on total number of confirmed external assets |
The facts
Each one read from Group-IB Attack Surface Management's own pages, with the date it was checked.
What it does
- Asset inventory
- Users can confirm or ignore discovered internet-facing assets to maintain an up-to-date external asset inventory.checked 30 Sep 2026
- Deployment and collection
- The product requires no agents, new instances, integrations, or major configurations for initial mapping, and the maker says discovery uses passive data collection.checked 30 Sep 2026
- Discovery
- Entering an organization’s domain lets the system identify and map its infrastructure using asset relationships such as subdomains, SSL certificates, and DNS records.checked 30 Sep 2026
- Integrations
- ASM offers a REST API for connecting SIEM, ticketing, and other security operations tools, native AWS and Azure cloud integrations, plus Postman collections and a Python library.checked 30 Sep 2026
- Intended users
- The product page describes use by enterprises seeking external attack surface visibility and gives examples of security teams using it to monitor assets, vulnerabilities, and threats.checked 30 Sep 2026
- Issue workflow
- Issues on confirmed assets can be marked Under Review, Solved, Ignored, or False Positive, and users can create tickets for remediation.checked 30 Sep 2026
- Purpose
- The platform maps external assets, monitors the attack surface continuously, and enriches findings with threat intelligence to assess risk and prioritize issues.checked 30 Sep 2026
- Security certification
- Group-IB’s certificates page lists its management system as certified to ISO 27001:2022 and ISO 9001:2015.checked 30 Sep 2026
- Support and onboarding
- The plan matrix lists a service desk, onboarding training, unlimited API access, and unlimited users for the Standard License and 3rd Party Risk module.checked 30 Sep 2026
- Threat intelligence
- Confirmed assets are checked against threat intelligence that includes credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity.checked 30 Sep 2026
The company
- Founded
- 2003checked 28 Sep 2026
- Headquarters
- Singaporechecked 28 Sep 2026
Money
- Plan distinction
- The 3rd Party Risk plan adds customized asset discovery for third parties and third-party cyber risk scoring; active scanning is also listed in the feature matrix.checked 30 Sep 2026
- Plan features
- The feature matrix lists continuous automated external asset discovery, validation and risk assessment, issue prioritization and ticketing, threat intelligence insights, visual mapping, and a graph research tool for the Standard License.checked 30 Sep 2026
- Trial limits
- The 21-day trial covers up to five domains and unlimited assets, includes reports and API data export, and ends automatically when the period expires.checked 30 Sep 2026
- Trial scan scope
- The trial covers common ports only; full port scans and active scanning capabilities are listed as options for paid licenses.checked 30 Sep 2026
Alternatives to Group-IB Attack Surface Management
- 1
CTM360
Free planAndroidiOSWebAPI8.0From $49.99 a year - 2
AttackIQ Platform
Free planWebAPILinuxmacOS7.9From $4,995 a month - 3
runZero
Free planWebAPILinuxmacOS7.8Free plan - 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
FullHunt
Free planWebAPI7.3From $149 a month - 6
Detectify Surface Monitoring
Free planWebAPI6.9From €2,500 a year