Attack Surface

Attack surface management tools for discovering, monitoring, and reducing external attack vectors to minimize cybersecurity risks.

Explore 98 curated cybersecurity tools, with 14,802+ visitors searching for solutions

FEATURED

Proton Pass Logo

Password manager with end-to-end encryption and identity protection features

NordVPN Logo

VPN service providing encrypted internet connections and privacy protection

Mandos Fractional CISO Services Logo

Fractional CISO services for B2B companies to accelerate sales and compliance

Get Featured

Feature your product and reach thousands of professionals.

Pentera Surface Logo

Pentera Surface is an external attack surface management platform that continuously maps, monitors, and validates web-facing assets through automated reconnaissance and safe exploitation testing.

-1
Rapid7 Threat Command Logo

A digital risk protection platform that monitors clear, deep, and dark web environments to identify and remediate external threats targeting organizations.

0
ZeroFOX Platform Logo

ZeroFox Platform is a unified external cybersecurity solution that helps organizations identify, monitor, and remediate threats across social media, surface web, deep web, and dark web environments.

0
Axur Platform Logo

A comprehensive external cybersecurity platform that combines AI and human expertise to detect, analyze, and remediate threats outside the traditional security perimeter including brand impersonation, data leakage, and digital asset exposure.

0
Resecurity Risk Digital Risk Monitoring Platform Logo

A digital risk monitoring platform that provides automated security posture assessment, threat intelligence, and continuous monitoring of enterprise digital assets across multiple risk vectors.

0
GroupSense Digital Risk Protection Services Logo

GroupSense Digital Risk Protection Services provides curated threat intelligence and attack surface monitoring through their Tracelight platform to help organizations prioritize and mitigate cyber threats.

0
FortiRecon Logo

FortiRecon is a SaaS-based Continuous Threat Exposure Management service that combines Attack Surface Management, Brand Protection, and Adversary Centric Intelligence to provide visibility into internal and external risks for early threat detection and response.

0
SOCRadar Digital Risk Protection Platform Logo

A digital risk protection platform that combines threat intelligence, dark web monitoring, attack surface management, brand protection, and supply chain intelligence to detect and respond to external cyber threats.

0
Dark Web Exposure Test by ImmuniWeb Logo

A free online service that scans the dark web for exposed credentials and sensitive data associated with specific domains or email addresses.

0
ZeroFox EASM Logo

A solution that discovers, analyzes, and helps remediate vulnerabilities across an organization's external digital attack surface by identifying and monitoring internet-facing assets.

0
ImmuniWeb® Discovery Logo

ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.

0
BeVigil Enterprise Logo

An attack surface management platform that discovers, maps, and monitors an organization's external digital assets to identify vulnerabilities and security weaknesses before they can be exploited.

0
Recorded Future Logo

A threat intelligence platform that provides comprehensive visibility into an organization's attack surface by collecting, analyzing, and structuring threat data to enable proactive security measures against emerging threats.

0
DeTCT Logo

DeTCT is a digital risk discovery and protection platform that monitors attack surfaces, vulnerabilities, data leaks, brand impersonation, and third-party risks to help organizations manage their cyber risk posture.

0
Kaduu Darknetsearch Logo

A dark web monitoring platform that scans dark and deep web sources to detect exposed organizational data, compromised credentials, domain spoofing, and supply chain threats.

0
XRATOR Logo

XRATOR is a cybersecurity platform that continuously identifies vulnerabilities, assesses business risks, and manages security posture to align with strategic objectives and compliance requirements.

0
Eclypsium Logo

A platform that provides visibility and security monitoring of hardware, firmware, and software components in IT infrastructure to identify supply chain risks and vulnerabilities.

0
gitGraber Logo

Monitor GitHub for sensitive data

0
Sn1per Logo

An open-source attack surface management platform for identifying and managing vulnerabilities

0
s3viewer Logo

A storage exploration tool that provides unified access to view publicly accessible Amazon S3 buckets, Azure Blob storage, FTP servers, and HTTP directory listings.

0
as3nt Logo

A tool for enumerating subdomains of a given domain

0
GitRob Logo

A reconnaissance tool for GitHub organizations

0
censys-enumeration Logo

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys.

0

Stay Updated with Mandos Brief

Get the latest cybersecurity updates in your inbox

POPULAR

RoboShadow Logo

A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.

14
Mandos Brief Newsletter Logo

A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

7
CloudDefense.AI Logo

CloudDefense.AI is a Cloud Native Application Protection Platform (CNAPP) that safeguards cloud infrastructure and cloud-native apps with expertise, precision, and confidence.

7
Fabric Platform by BlackStork Logo

Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.

6
TestSavantAI Logo

Security platform that provides protection, monitoring and governance for enterprise generative AI applications and LLMs against various threats including prompt injection and data poisoning.

5
View Popular Tools →