18.0
CTM360 is a cybersecurity platform for identifying vulnerabilities and handling threats across the surface, deep, and dark web.
Free planAndroidiOSWeb
Alternatives to Qualys External Attack Surface Management
Qualys External Attack Surface Management maps an organization’s internet-facing footprint from the outside. It discovers domains, subdomains, cloud workloads, web applications, APIs, certificates, and exposed services, then attributes those assets and their relationships. It also highlights shadow IT, detects newly exposed or changed services, and prioritizes risk with TruRisk scores covering vulnerabilities, misconfigurations, criticality, and exposure. Assets can move…
27.9
AttackIQ Platform is a continuous threat exposure management platform for modeling adversary behavior, finding attack paths, validating security…
Free planWebAPILinux
37.8
runZero is an attack surface and exposure management platform for discovering and tracking IT, OT, IoT, cloud, mobile, and remote assets.
Free planWebAPILinux
- 4
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 5
FullHunt
FullHunt provides internet intelligence infrastructure for security products and external attack surface monitoring through web access, APIs, data feeds, and MCP tools.
Free planWebAPI7.3From $149 a month - 6
Detectify Surface Monitoring
Detectify Surface Monitoring continuously monitors internet-facing subdomains for exposed files, vulnerabilities, and misconfigurations.
Free planWebAPI6.9From €2,500 a year - 7
CyCognito Platform
CyCognito Platform discovers, tests and prioritizes external security risks from an attacker’s perspective.
AndroidiOSWebAPI6.8 - 8
ImmuniWeb
ImmuniWeb is a cybersecurity platform for testing and protecting web and mobile applications, APIs, microservices, and cloud and network infrastructure.
AndroidiOSWebAPI6.8From €595 a year - 9
CrowdStrike Falcon Surface
CrowdStrike Falcon Surface, also called Falcon Exposure Management, is a paid product for identifying vulnerabilities, misconfigurations, and attack…
WebLinuxmacOSWindows6.6 - 10
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 11
OWASP Amass
OWASP Amass is a free, open-source framework for mapping network attack surfaces and discovering external assets.
Free planLinuxmacOSSelf-hostedWindows6.5Free plan - 12
SOCRadar Extended Threat Intelligence Platform
SOCRadar Extended Threat Intelligence Platform (XTI) combines threat intelligence with external attack surface management, brand protection, and dark web monitoring.
WebAPI6.5From $4,550 a year - 13
Rapid7 Surface Command
Rapid7 Surface Command gives security teams a unified inventory of internal and external assets across an organization's digital estate.
WebAPILinuxmacOS6.4 - 14
Tenable One Attack Surface Management
Tenable One Attack Surface Management helps organizations identify and assess internet-facing assets and services that could be reached externally.
WebLinuxmacOSWindows6.4 - 15
Halo Security
Halo Security is an external attack surface management platform available through web access and an API.
WebAPI6.3From $399 a month - 16
Shodan Monitor
Shodan Monitor tracks Internet-connected devices and sends real-time notifications when unexpected devices or events appear.
WebAPILinux6.3From $69 a month - 17
Aftra
Web6.2From €490 a year - 18
Cisco Catalyst Center
Cisco Catalyst Center is a centralized controller and management dashboard for enterprise network operations.
WebAPILinuxmacOS6.2 - 19
Bugcrowd External Attack Surface Management
Bugcrowd External Attack Surface Management, also called Savant Vista, gives teams ongoing visibility into externally reachable assets associated…
Web6.0 - 20
Check Point External Risk Management
Check Point External Risk Management is a cloud-based service for discovering and reducing risks affecting an organization’s internet-facing assets.
WebAPIExtensionLinux5.9 - 21
Group-IB Attack Surface Management
Group-IB Attack Surface Management is a cloud platform for discovering and monitoring an organization's internet-facing assets.
WebAPI5.9 - 22
Hadrian
Web5.9€3,000 one-time - 235.7
- 24
Bitsight External Attack Surface Management
Bitsight External Attack Surface Management helps organizations find external assets, assess exposure, and prioritize vulnerabilities across their…
WebAPI5.5 - 25
Outpost24 Attack Surface Management
Outpost24 Attack Surface Management is a cloud-based service for finding and monitoring internet-facing assets and prioritizing exposure.
WebAPI5.5 - 26
ZeroFox Attack Surface Intelligence
ZeroFox Attack Surface Intelligence continuously discovers and prioritizes internet-facing assets across cloud environments, applications, shadow IT, and third parties.
WebAPI5.5 - 27
Censys Attack Surface Management
Censys Attack Surface Management continuously measures an organization’s internet-facing exposure from an outside-in perspective.
Web5.4 - 28
Armis Centrix for Attack Surface Management
Armis Centrix for Attack Surface Management is a paid, cloud-native security platform that builds an inventory from existing asset data, then helps…
WebAPISelf-hosted5.3 - 29
EASMLens
EASMLens is a web platform for discovering and monitoring internet-facing assets from outside an organization without agents.
Web5.2 - 30
Bitdefender GravityZone Cloud Workload Security
WebLinuxWindows5.1