Products

ThreatPort is an External Attack Surface Management (EASM) platform that gives businesses full visibility into their public-facing digital infrastructure — without enterprise complexity or cost. Enter a domain name and ThreatPort runs a 9-phase automated scan: subdomain enumeration (28 sources), port scanning (134+ ports), CVE matching against NVD and CISA KEV, IP reputation across 19 threat intel feeds, email security analysis (SPF/DMARC/DKIM), typosquatting detection, and MITRE ATT&am

Offensive Security Intelligence. Designed for a Secure Tomorrow.

RiskProfiler Cloud Attack Surface Management (CASM) provides continuous, unified visibility across complex multi-cloud ecosystems. It consolidates intelligence from AWS, Azure, GCP, and other providers to detect and correlate misconfigurations, exposed assets, certificate lapses, API leaks, and other suspicious activities. By applying contextual analytics and proprietary threat scoring, CASM transforms raw findings into prioritized, actionable insights, empowering security teams to rapidly ident

Maphra is an enterprise-grade Attack Surface Management (ASM) platform by DedSec Technologies that continuously discovers, monitors, and analyzes an organization’s external digital footprint. It identifies exposed assets, vulnerabilities, misconfigurations, leaked data, and high-risk attack paths across cloud, on-premise, SaaS, containers, and shadow IT.

BeforeBreach Intelligence is an External Attack Surface Management (EASM) platform that provides continuous visibility into an organization’s internet-facing assets and security exposures. The platform discovers and monitors domains, subdomains, IP addresses, cloud resources, and exposed services to identify potential entry points attackers can exploit. It detects risks such as exposed admin panels, leaked credentials, misconfigured cloud assets, vulnerable services, and critical CVEs. BeforeB

Ostorlab Agentic Attack Surface Management helps security teams autonomously discover, validate, monitor, and secure their entire external attack surface. Agentic, graph-based discovery continuously investigates relationships between domains, web applications, APIs, IPs, mobile apps, infrastructure, and third-party assets to uncover exposure that traditional list-based approaches may miss. AI agents validate ownership, remove duplicates and noise, enrich asset context, and prioritize findings

Protector Class is an exposure assessment and continuous monitoring platform for small practices. A certified protector checks what a practice publishes to anyone who asks, across breach databases, mail infrastructure, and public records, and delivers the findings in plain language with the evidence under every line. Nothing is installed and nothing is touched that is not already public. Customers receive a written assessment, a live monitoring dashboard, and a remediation plan their own IT prov

CheckFix ist eine automatisierte externe Sicherheitsbewertung. Ausgehend von einer Domain ermittelt CheckFix die von außen erreichbare Angriffsfläche und prüft fünf Bereiche – E-Mail-Sicherheit (SPF/DKIM/DMARC), TLS/SSL, bekannte Schwachstellen (CVEs), Security Headers und offene Internet-Schnittstellen. Das Ergebnis ist ein A–F-Rating je Kategorie plus eine priorisierte ToDo-Liste zur Behebung. Die Prüfung erfolgt nicht-invasiv, orientiert an NIST SP 800-115. Entwickelt von secinto.

WYKYK AI Exposure Scan is an external attack surface management (EASM) platform that continuously discovers and monitors everything an organisation exposes to the internet, and scores it the way an attacker would see it. Enter a domain and the scan maps all subdomains, IPs, ports, certificates, DNS and email security settings, cloud assets, third-party technologies and leaked credentials, then runs 2,250+ security checks against them. Key capabilities: - Automatic asset discovery: subdomains, s