Kryptasec Shield is a cloud platform for external attack surface management (EASM) and cyber risk scoring. It continuously analyzes a company's public-facing domains and returns a clear risk index with step-by-step guidance to fix each finding.
The platform checks 28 types of findings, including email authentication (SPF, DKIM and DMARC), certificates and TLS, DNS, subdomains and shadow IT, security headers, cookies, domain and IP reputation, WHOIS and exposed files. Domains are scanned automatically every week, with alerts by email, Slack, Microsoft Teams, Discord and Telegram.
Business and Enterprise plans add inbound anti-phishing for Microsoft 365 and Google Workspace, phishing simulations with employee training, configuration generators, automatic Jira tickets, a read-only API, and mapping of findings to ISO 27001, NIST CSF and PCI-DSS with an executive report for insurers.
ReconGrade checks an independent medical or dental practice's public website, email domain and DNS from the outside, the way anyone on the internet can see them, and explains what it finds in plain language with fixes an IT or web vendor can apply. Website checks cover HTTPS and certificate setup, security headers, cookie flags, mixed content, technology disclosure, and signs of third-party tracking on patient-facing pages. Email checks cover SPF, DMARC and DKIM, DMARC policy strength and MTA-STS. Every result is labelled observed, suspected, not observed or not tested. The free public check is non-intrusive (no port scans, logins or exploit testing); deeper checks run only after domain ownership is verified. Built for independent practices and the web agencies, IT providers and compliance advisors who serve them. ReconGrade is an external exposure check, not a HIPAA compliance certification.
PentaTrail is an external attack surface management (ASM) and continuous threat exposure management (CTEM) platform developed by Pentacon Research, Inc. in Japan. It helps organizations discover internet-facing assets, identify vulnerabilities and misconfigurations, prioritize risks using technical severity and business impact, and track remediation. PentaTrail combines asset discovery, vulnerability assessment, AI-generated remediation guidance, owner assignment, remediation task management, and reporting. An MCP server enables approved AI agents to access security findings and support remediation workflows. PentaTrail ASM provides a free entry point for external asset visibility, while PentaTrail CTEM supports ongoing risk prioritization and remediation management. The service is available in Japanese and English.
The leader of industrial cybersecurity. Delivering real-time visibility to manage cyber risk & improve resilience for ICS and industrial operations at scale
Redjack delivers total asset and dependency visibility and AI-powered business insights for cyber resilience. Our platform provides a comprehensive overview of the things that matter, their relationships, and their interdependencies derived from observed communications, both internal and external. This helps organizations prioritize resource allocation and achieve resilience through data-driven decisions.
Aptori autonomously tests your APIs to ensure security, compliance, and availability. Our proprietary Semantic Reasoning Platform uses AI to construct a semantic model of your API and autonomously interrogate API sequences —not just individual API endpoints. By modeling how a human, whether a customer or hacker, may use an API, Aptori can rapidly generate and test thousands of API sequences, a feat that’s impossible to scale without Aptori.
We are passionate about cybersecurity and proud to make the Internet safer. We aim to propose a comprehensive threat intelligence solution accessible to all cybersecurity professionals and design a platform with one of the best user experiences.Our services include:
Platform-API-Data Feeds.
IONIX is the attack surface management solution that uses Connective Intelligence to shine a spotlight on exploitable risks across your real attack surface and its digital supply chain. Only IONIX discovers and monitors every internet-facing asset and connection, delivers laser focus into the most important risks to your business, and provides the tools to rapidly remediate exploitable threats and reduce attack surface risk. Global leaders including Infosys, Warner Music Group, The Telegraph, and E. ON depend on IONIX’s machine learning-powered discovery engine, contextual risk assessment and prioritization, and end-to-end remediation workflow to go on the offensive in managing their complex and ever-changing attack surfaces.
Exposentry is continuous vulnerability monitoring software that identifies and documents external attack surfaces. Built on OpenKAT, it automatically discovers internet-connected domains, systems, and services, scanning for vulnerabilities without requiring hardware or software installation. Using an evidence-first approach, Exposentry records vulnerabilities with forensic documentation. Organizations receive detailed, shareable reports on their digital exposure, digitally sealed for authenticity. The platform operates under GDPR compliance on European infrastructure, ensuring data sovereignty outside the U.S. CLOUD Act. Exposentry supports supply chain security by assessing vendor attack surfaces through dated reports. Complementing penetration testing, it provides continuous visibility rather than single-point assessments. Setup is simple, starting with online registration and DNS verification for same-day operation.
Your company has internet-accessible technology. Domain names, subdomains, IP address, servers, web pages – things that anyone can access on the internet. We discover every little bit of that for you. We inventory it, and keep that inventory updated.
Bit Discovery makes it easy. We illuminate every little bit of the internet so that our customers are aware of all of the internet-accessible tech they own. Using snapshots of the internet, we organize massive amounts of information and distill it down into a simple and elegant inventory system. The Bit Discovery solution was created for busy people, by busy people. Time is everyone’s most precious resource, so we work as efficiently for our customers as we do for ourselves.
DeTCT is your essential digital risk discovery and protection platform working tirelessly to monitor hidden attack surfaces, vulnerable systems, leaked data, executive impersonation, brand infringement, and validating your patch and vulnerability processes so your cyber posture stays strong in the face of emerging threats.
Zscaler Asset Exposure Management gives organizations a complete, accurate, and context-rich inventory of all their cyber assets - across endpoints, cloud, and on-prem environments - to dramatically reduce risk.
Built upon the Data Fabric for Security, Asset Exposure Management brings together data from across your security stack, deduplicates it, enriches it with additional context, and groups related entities together. This enables customers to uncover unknown or misconfigured assets, identify coverage gaps, and ensure critical controls are in place.
This unified visibility streamlines compliance, supports risk mitigation workflows, and empowers security teams to quickly address coverage gaps. Ultimately, Asset Exposure Management is essential for effective cybersecurity and proactive attack surface management.
Key Features and Benefits:
• Unified Asset Inventory: Gain a single, accurate view of all assets by consolidating data from 200+ connectors, enabling organizations to trust their asset records and reduce blind spots.
• Coverage Gap Identification: Pinpoint missing controls and misconfigurations across assets, allowing security teams to proactively close gaps and strengthen their security posture.
• Automated Risk Mitigation Workflows: Initiate and track automated tasks to mitigate policy violation risk, ensure faster issue resolution, and minimize organizational risk before issues can be corrected.
• Continuous CMDB Enrichment: Automatically update your CMDB with missing assets and critical details, increasing confidence in inventory accuracy and supporting compliance.
• Comprehensive Reporting and Dashboards: Generate robust reports and custom dashboards, fostering cross-team collaboration and supporting audit and compliance efforts.
RiskIQ Digital Footprint and External Threat Management is a comprehensive solution designed to provide organizations with real-time visibility into their internet-facing digital assets. By continuously discovering and analyzing web pages, domains, IP addresses, and other online components, it enables businesses to identify vulnerabilities, misconfigurations, and potential security threats beyond their firewall. This proactive approach helps organizations manage their external attack surface effectively, ensuring a robust security posture in an increasingly digital landscape.
Key Features and Functionality:
- Comprehensive Asset Discovery: Automatically identifies and inventories all digital assets associated with an organization, including websites, domains, IP addresses, and cloud services.
- Vulnerability Assessment: Analyzes discovered assets for security weaknesses, misconfigurations, and compliance issues, providing detailed risk assessments.
- Continuous Monitoring: Offers real-time monitoring of digital assets to detect changes, anomalies, and emerging threats promptly.
- Threat Intelligence Integration: Incorporates global threat intelligence to contextualize findings, enabling faster and more informed decision-making.
- Automated Reporting: Generates detailed reports and dashboards that visualize the organization's digital footprint, highlighting areas of concern and facilitating strategic planning.
Primary Value and Problem Solved:
RiskIQ Digital Footprint and External Threat Management addresses the critical challenge of managing and securing an organization's external digital presence. By providing continuous visibility and analysis of internet-facing assets, it helps organizations:
- Reduce Attack Surface: Identifies and mitigates unknown or unmanaged digital assets that could serve as entry points for cyber threats.
- Enhance Security Posture: Proactively detects vulnerabilities and misconfigurations, allowing for timely remediation before exploitation.
- Ensure Compliance: Monitors for compliance with industry standards and regulations, reducing the risk of legal and financial penalties.
- Optimize Resources: Automates asset discovery and risk assessment processes, enabling security teams to focus on strategic initiatives rather than manual tasks.
By leveraging RiskIQ's solution, organizations can effectively manage their external digital assets, minimize security risks, and maintain a strong defense against evolving cyber threats.
Edgewatch is an Attack Surface Management Platform that assists companies in discovering, monitoring, and analyzing devices accessible from the Internet. Edgewatch continuously scans public IP addresses to reveal a digital footprint, offering an external perspective of the online infrastructure.