Attack surface management (ASM) is a relatively new cybersecurity technology that combines elements of vulnerability management and asset discovery with the automation capabilities of breach and attack simulation (BAS) and applies them to an organization’s entire IT environment, from networks to the cloud.<\/p>\n\n\n\n
That makes ASM’s ambitions much greater than legacy vulnerability management tools. Attack surface management aims to automate the process of discovering, assessing, and prioritizing vulnerabilities and third-party, digital supply chain, and cloud risks. It addresses both internal and external (EASM) risks. CAASM (cyber asset ASM) and DRPS (digital risk protection) are also related terms and elements of ASM.<\/p>\n\n\n\n
Here are our seven picks for the early leaders in the attack surface management market:<\/p>\n\n\n\n
Here is a comparison of the top attack surface management tools, followed by in-depth reviews.<\/p>\n\n\n\n Table of Contents<\/p>\n<\/th> Asset Discovery<\/th> Reporting<\/th> Integrations<\/th> Certifications<\/th> Pricing<\/strong><\/th><\/tr><\/thead> CyCognito<\/a><\/strong><\/td> Dynamic asset inventory, natural language processing, advanced analysis of open-source intelligence (OSINT)<\/td> Attack Vector Reports <\/td> Zendesk, Microsoft 365, Azure, Excel, Outlook, Google, Sheets, Gmail, Slack, AWS, PagerDuty, Okta<\/td> Member of Cloud Security Alliance (CSA) and OWASP<\/td> Starts at $11 per asset or $30,000 per year<\/td><\/tr> Google Mandiant Cloud Security <\/a><\/strong><\/td> Infrastructure-as-code (IaC) templates, virtual machines (VMs), containers, and storage buckets<\/td> Asset Inventory, Vulnerability Reporting, Compliance Reporting<\/td> Google Cloud Security Command Center (SCC), Google Cloud Identity and Access Management (IAM), Google Cloud Key Management Service (KMS)<\/td> ISO\/IEC 27001, SOC 2 Type II<\/td> Free trial to start<\/td><\/tr> Palo Alto Cortex Xpanse<\/a><\/strong><\/td> Internet-facing asset discovery and dynamic port\/service monitoring features <\/td> Report Center found in their platform<\/td> Prisma Cloud, Cortex XSOAR<\/td> CSA Labs<\/td> $95,000\/unit per annum<\/td><\/tr> Microsoft Defender<\/a><\/strong><\/td> Build my Attack Surface feature on the dashboard<\/td> 4 built-in Microsoft Defender EASM inventory reports in Azure: Attack Surface SummarySecurity PostureGDPR ComplianceOWASP Top 10<\/td> Microsoft 365, Microsoft 365 Defender, Microsoft Sentinel, Microsoft Defender for Cloud, Azure, Windows, Office 365, Dynamic 365<\/td> N\/A<\/td> 30-day free trial, then $0.011 asset\/day after trial ends<\/td><\/tr> CrowdStrike Falcon Surface <\/a><\/strong><\/td> AI-powered attack surface analytics<\/td> Custom data generated reports within the platform<\/td> CrowdStrike Platforms, Slack, Jira, ServiceNow<\/td> NSA-CIRA<\/td> $299.95 – $924.95 per year
<\/td><\/tr>Tenable<\/a><\/strong><\/td> Tenable One, an exposure management platform<\/td> Identifies assets using DNS records, IP addresses, and ASN, and provides over 180 metadata fields <\/td> Tenable Attack Surface Management, Add-on for Splunk<\/td> ISO\/IEC 27001\/27002<\/td> $5,290 – $15,076.50 per year
<\/td><\/tr>IBM Security Randori<\/a><\/strong><\/td> Center-of-mass-out approach<\/td> Discovery Path within the platform<\/td> Splunk Enterprises, ServiceNow, Axonius, Rapid7 InsightIDR, Panaseer, Qualys Cloud Platform, IBM Security QRadar, Splunk Phantom, Tenable, LogicHub<\/td> N\/A<\/td> Free 7-day trial<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n