Threat & Vulnerability Mgmt · Advanced
Attack Surface Management (ASM)
Discovers internet-facing and unknown exposures.
8 options listedTypical cost: $25k-$150k/yrIDENTIFY (ID)
Overview
External ASM continuously discovers internet-facing assets, shadow IT, and exposures from the attacker's view. It catches forgotten domains, certs, and cloud assets before adversaries do. Sold per organization, domain, or asset count. Often paired with vulnerability management and pentesting.
Extends vulnerability management to external and unknown assets.
Advantages
- Finds unknown internet-facing exposure from the attacker's view
- Xpanse/CyCognito strong
- Amass free
- catches shadow IT.
Trade-offs
- Discovery noise and attribution errors
- overlaps vulnerability management
- per-asset/org pricing
- action needs owner mapping.
Vendors & tools in this area
IONIXCommercial
EASM platform (formerly Cyberpion) emphasizing automated, proactive remediation over discovery alone.
Visit site →