Group-IB Attack Surface Management
5.9#22 in attack surface management softwareWebAPI
Visit| Fact | Group-IB Attack Surface Management | runZero |
|---|---|---|
| Discovery | Entering an organization’s domain lets the system identify and map its infrastructure using asset relationships such as subdomains, SSL certificates, and DNS records. | The platform combines high-speed active scanning, passive traffic sampling, and API integrations into a continuously updated inventory. |
| Integrations | ASM offers a REST API for connecting SIEM, ticketing, and other security operations tools, native AWS and Azure cloud integrations, plus Postman collections and a Python library. | Inbound integrations include AWS, Google Cloud, Azure, Prisma, VMware, Wiz, CrowdStrike, Microsoft 365 Defender, Intune, Miradore, SentinelOne, Tanium, MECM and Google Workspace. |
| Purpose | The platform maps external assets, monitors the attack surface continuously, and enriches findings with threat intelligence to assess risk and prioritize issues. | runZero is an attack surface and exposure management platform covering IT, OT, IoT, cloud, mobile, and remote assets. |
The platform suits enterprise security teams seeking visibility into external assets, vulnerabilities, and threats. Its 3rd Party Risk plan is aimed at teams assessing third-party cyber risk.
Community Edition is aimed at small businesses, individuals, and security researchers with 100 or fewer assets. The Platform is built for enterprises managing larger environments.