Astelia
Founded 2024
Exposure management isolating the small share of vulnerabilities attackers can actually exploit.
Exposure Management & CTEM
Attack surface management, vulnerability prioritization, exposure and attack-path analysis.
23 vendors; newest added 2026-08-08. Ordered by name. No paid placement.
AttackIQ
Founded 2013
Breach and attack simulation platform testing controls against adversary techniques mapped to MITRE ATT&CK.
Attaxion
Founded 2023
External attack surface management platform sized for small security teams.
Axonius
Founded 2017
Asset inventory platform correlating data from existing tools to expose coverage gaps and misconfigurations.
Backline AI
Founded 2024
Platform using AI agents to automatically remediate security findings, not just report them.
Breeze Security
Founded 2023
Platform mapping attack surface and exposures across cloud, SaaS, and AI environments in one view.
Brinqa
Founded 2009
Risk-based vulnerability management platform connecting security findings to business context and ownership.
Cymulate
Founded 2016
Breach and attack simulation platform testing security controls against realistic attack techniques.
Filigran
Founded 2022
Open-source threat intelligence and attack simulation software, maker of OpenCTI and OpenBAS.
Hadrian
Founded 2021
External attack surface management platform testing exposures the way an attacker would.
IONIX
Founded 2017
Attack surface management platform that discovers, tests, and prioritizes an organization's internet-facing assets and exposures.
Mondoo
Founded 2020
Managed vulnerability service using agentic automation to drive fixes, not just findings.
Nucleus Security
Founded 2019
Vulnerability and exposure management platform aggregating findings from hundreds of scanners into one prioritized workflow.
Phoenix Security
Founded 2021
ASPM platform that merges code and cloud findings into a single prioritized remediation list.
Picus Security
Founded 2013
Security validation platform combining breach and attack simulation with automated penetration testing.
Qualys
Founded 1999
Cloud platform for vulnerability management, compliance, and exposure risk measurement across enterprise IT assets.
RedSeal
Founded 2004
Network modeling platform mapping hybrid IT, OT, and IoT environments to expose attack paths.
SafeBreach
Founded 2014
Breach and attack simulation validating security controls against real attacker techniques.
Tenable
Founded 2002
Vulnerability and exposure management platform covering IT, cloud, identity, and operational technology assets.
ThreatAware
Founded 2019
Agentless platform inventorying every device and checking that security tools actually cover them.
Tonic Security
Founded 2024
Agentic platform that turns fragmented exposure signals into verified, completed remediation.
XM Cyber
Founded 2016
Attack path management showing how attackers could reach critical assets in hybrid environments.
Zafran Security
Founded 2022
Exposure management platform using runtime signals and existing controls to cut vulnerability noise.