From Boston, RunZero delivers agentless asset discovery. Browse RunZero Platform and RunZero Asset Inventory, check key capabilities and compare similar vendors.
Vulnerability & Exposure Management
Attack Surface Management Software: Find Exposed Assets
Discover forgotten domains, open ports and shadow IT before attackers do. Compare attack surface management tools for continuous discovery and risk prioritization.
32 vendors61 products
See the Top 20 rankingAttack Surface Management vendors 32
Companies that offer Attack Surface Management.
Featured vendors
Outpost24 offers continuous threat exposure management. Explore Outpost24 HIAB, compare key features and see the top Exposure Management alternatives before you buy.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Armis
San Francisco, California, USA
Axonius
New York, New York, USA
Balbix
San Jose, California, USA
Bishop Fox
Tempe, Arizona, USA
Bitsight
Boston, Massachusetts, USA
Bugcrowd
San Francisco, California, USA
Censys
Ann Arbor, Michigan, USA
CloudSEK
Singapore
CrowdStrike
Austin, Texas, USA
Cyble
Atlanta, Georgia, USA
Detectify
Stockholm, Sweden
Fortinet
Sunnyvale, California, USA
Intruder
London, United Kingdom
Invicti
Austin, Texas, USA
JupiterOne
Morrisville, North Carolina, USA
Microsoft
Redmond, Washington, USA
NCC Group
Manchester, United Kingdom
OWASP
Global nonprofit organization
Outpost24
Stockholm, Sweden
Palo Alto Networks
Santa Clara, California, USA
ProjectDiscovery
Global / Remote
Qualys
Foster City, California, USA
Randori
Dallas, Texas, USA
Rapid7
Boston, Massachusetts, USA
Attack Surface Management products 61
Open a product to see its features, pricing and reviews, or compare it with others.
Invicti Enterprise
Evaluating Invicti Enterprise? See how this DAST tool handles DAST scanning and Proof-Based Scanning, where it fits best and which alternatives to compare.
JupiterOne
Evaluating JupiterOne? See how this Attack Surface Management tool handles CAASM and continuous cloud discovery, where it fits best and which alternatives to compare.
JupiterOne Attack Surface Management
JupiterOne Attack Surface Management: shadow cloud detection and external asset discovery. Built for shadow IT mitigation. Compare Attack Surface Management alternatives.
Katana
Looking for Application Security Testing software? Katana by ProjectDiscovery provides endpoint discovery for Web Discovery. Compare features and alternatives.
Microsoft Defender External Attack Surface Management
Microsoft Defender External Attack Surface Management: asset discovery. Built for external asset discovery. Compare Attack Surface Management alternatives.
NCC Group Domain Intelligence
NCC Group Domain Intelligence: threat domain monitoring and lookalike typo detection. Built for Brand Protection. Compare Digital Risk Protection alternatives.
Naabu
Evaluating Naabu? See how this Attack Surface Management tool handles JSON formatting and nmap integration, where it fits best and which alternatives to compare.
Nessus Expert
Shortlisting Vulnerability Scanning tools? Nessus Expert by Tenable brings compliance auditing, with on-premises or hybrid deployment. See strengths and alternatives.
OWASP Amass
OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.
Outpost24 Attack Surface Management
Outpost24 Attack Surface Management: shadow IT detection and SSL certificate tracking. Built for external asset discovery. Compare Attack Surface Management alternatives.
Outpost24 HIAB
Outpost24 HIAB covers automated internal network scanning and authenticated vulnerability checks for network patch auditing. Compare top Attack Surface Management tools.
Outpost24 Sweepatic
Outpost24 Sweepatic: autonomous asset discovery and digital footprint mapping. Built for shadow IT perimeter discovery. Compare Asset Discovery alternatives.
ProjectDiscovery Cloud Platform
ProjectDiscovery Cloud Platform offers external asset discovery and Continuous Nuclei scanning. Use it for Security Testing. See Attack Surface Management alternatives.
Qualys Global AssetView
Looking for IT Asset Management software? Qualys Global AssetView by Qualys provides shadow IT detection for IT asset discovery. Compare features and alternatives.
Qualys Vulnerability Management
Evaluating Qualys Vulnerability Management? See how this Vulnerability Management tool handles reporting, where it fits best and which alternatives to compare.
Randori
Randori: exploitability testing and automated adversary emulation. Built for continuous attack surface mapping. Compare Automated Penetration Testing alternatives.
Randori Attack Surface Management
Randori Attack Surface Management: shadow IT identification. Built for external asset discovery and shadow IT elimination. Compare Attack Surface Management alternatives.
Rapid7 Command Platform
Free trial available. Rapid7 Command Platform by Rapid7 offers cloud CNAPP integration. Compare features, use cases and leading Security Operations alternatives.
Rapid7 InsightVM
Rapid7 InsightVM offers continuous endpoint visibility and Real Risk scoring. Use it for continuous vulnerability management. See Exposure Management alternatives.
Recorded Future Attack Surface Intelligence
Recorded Future Attack Surface Intelligence: risk-based scoring and certificate tracking. Built for digital asset discovery. Compare Exposure Management alternatives.
RunZero Asset Inventory
Evaluating RunZero Asset Inventory? See how this Attack Surface Management tool handles dynamic search queries, where it fits best and which alternatives to compare.
RunZero Network Discovery
RunZero Network Discovery: rogue device detection and shadow IT identification. Built for protocol-level network analysis. Compare Attack Surface Management alternatives.
RunZero Platform
Get the facts on RunZero Platform: unified CAASM engine. Built for unified CAASM. Compare it with other Attack Surface Management options before you decide.
Shodan InternetDB
Shodan InternetDB helps teams with SIEM alert context. Explore features like network tags, cloud deployment and the closest Attack Surface Management competitors.