Halo Security
Halo Security is an external attack surface management platform available through web access and an API.
What Halo Security is
Halo Security is an external attack surface management platform available through web access and an API. It discovers and catalogs known and unknown internet-facing domains, hostnames and IP addresses, updating the inventory daily. Agentless scanning covers internet-facing assets and can identify issues beyond known CVEs, including subdomain takeovers and misconfigured cloud services. Risk scores, severity ratings and the Known Exploited Vulnerability catalog help prioritize findings, with remediation guidance for follow-up. Optional cloud connectors support AWS, GCP, Azure and Cloudflare, while listed integrations include Jira, PagerDuty, Vanta, Splunk, Slack, Google Chat, ServiceNow, GoDaddy, Linode, F5 BIG-IP and Zapier. External asset discovery is included, but security-scanning quantities depend on the subscription. A trial requires no credit card and covers discovery plus firewall, website and technology scans for up to 100 targets. Halo identifies itself as a PCI DSS Approved Scanning Vendor.
Good
- Discovers known and unknown external assets
- Daily inventory updates for domains and IP addresses
- Agentless scanning finds issues beyond known CVEs
- Risk scoring supports prioritization
- Provides API access and many integrations
Watch out
- No free plan
- Scanning quantity is subscription-limited
- Trial scanning covers up to 100 targets
Who it suits
Halo suits lean security teams needing continuous visibility across internet-facing and cloud assets. Larger organizations can request tailored enterprise plans.
Verdict
Halo Security focuses on discovering, monitoring and prioritizing internet-facing exposure through web and API access. Its connectors, integrations and trial support evaluation, while subscription-based scan limits and starting price matter for planning.
Plans and prices
From Halo Security's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Application Scanning add-on | $60 a month | Per target · per target per month |
| Compliance Reporting add-on | $100 a month | PCI compliance reports · per month |
| EASM | $399 a month | Target-based pricing · scanning quantity limited by subscription · annual plans available |
| Manual Penetration Testing add-on | Priced on request | Price varies by engagement |
The facts
Each one read from Halo Security's own pages, with the date it was checked.
What it does
- Asset discovery
- It identifies and catalogs known and unknown internet-facing domains, hostnames, and IP addresses, with daily updates.checked 9 Oct 2026
- Cloud connectors
- Optional connectors include AWS, GCP, Azure, and Cloudflare.checked 9 Oct 2026
- Integrations
- Listed integrations include AWS, Azure, Google Cloud, Cloudflare, Jira, PagerDuty, Vanta, Splunk, Slack, Google Chat, ServiceNow, GoDaddy, Linode, F5 BIG-IP, and Zapier.checked 9 Oct 2026
- Intended users
- Halo describes its EASM platform as designed for lean teams and organizations with larger attack surfaces can request tailored enterprise plans.checked 9 Oct 2026
- Product
- Halo Security is an external attack surface management platform for visibility into internet-facing assets.checked 9 Oct 2026
- Risk prioritization
- The platform tracks risk scores, uses severity ratings and the Known Exploited Vulnerability catalog to prioritize issues, and provides remediation guidance.checked 9 Oct 2026
- Scanning
- Agentless vulnerability detection covers internet-facing assets and identifies issues beyond known CVEs, including subdomain takeovers and misconfigured cloud services.checked 9 Oct 2026
- Security and compliance
- Halo Security identifies itself as a PCI DSS Approved Scanning Vendor (ASV).checked 9 Oct 2026
- Support
- Halo offers onboarding with its support team, and says most customers are fully onboarded within 3–7 days.checked 9 Oct 2026
- Target limit
- Discovery of external assets is included, but security scanning is limited to the quantity of targets in the subscription.checked 9 Oct 2026
The company
- Company history
- The company says its security services were rebranded as Halo Security in 2022 and that the business was founded in 2013.checked 9 Oct 2026
- Founded
- 2013checked 28 Sep 2026
- Headquarters
- Miami Beach, Florida, United Stateschecked 28 Sep 2026
Money
- Trial limits
- The free trial includes asset discovery and firewall, website, and technology scanning for up to 100 targets, with no credit card required.checked 9 Oct 2026
Alternatives to Halo Security
- 1
CTM360
Free planAndroidiOSWebAPI8.0From $49.99 a year - 2
AttackIQ Platform
Free planWebAPILinuxmacOS7.9From $4,995 a month - 3
runZero
Free planWebAPILinuxmacOS7.8Free plan - 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
FullHunt
Free planWebAPI7.3From $149 a month - 6
Detectify Surface Monitoring
Free planWebAPI6.9From €2,500 a year