17 attack surface management apps in one list: the established products, and every new one as it launches.
Updated
How many new attack surface management apps arrive each month, to see at a glance whether the market is growing. 2 in the last 12 months.
What people type into Google when they look for attack surface management apps, and what advertisers bid for a click. “attack surface management tool” alone is searched 720 times a month worldwide.
| Search | Per month, US | Cost per click |
|---|---|---|
| attack surface management solutions | 210 | - |
| external attack surface management | 210 | $91.45 |
| microsoft defender external attack surface management | 110 | $145.37 |
| external attack surface management tools | 70 | $54.08 |
| attack surface management vendors | 50 | $168.50 |
Cost per click is what advertisers bid for one visit from that search. Figures from Oct 2026.
The attack surface management apps most recently added to this market, newest first. The latest is AUTODIT.
| # | App | Added |
|---|---|---|
| 1 |  AUTODIT AUTODIT.IO is an AI-powered cybersecurity platform that continuously discovers internet-facing assets, Shadow IT, and forgotten services, giving organizations a real-time view of their attack surface | |
| 2 |  Securelic Continuous external attack surface visibility | |
| 3 | DE Deepengine Deepengine helps tech teams spot vulnerabilities before they hit your bottom line, starting at zero cost. Scan external IPs, domains, APIs, Web Apps, and more for 160K+ threats. Put security on autopilot with schedules, and generate reports for compliance. | |
| 4 | Threatwatch360 Go Beyond the Firewall | |
| 5 | DeepStrike DeepStrike is a leading cybersecurity firm specializing in human-powered, high-quality penetration testing designed to protect businesses from evolving cyber threats. Our team of world-class ethical h | |
| 6 |  Flawatch It empowers businesses with complete visibility and control over their digital assets, helping proactively identify, prioritize, and resolve vulnerabilities in real time to enhance security and compli | |
| 7 |  coocoor Monitor cyber threat for your web resources |
The kinds of attack surface management apps here, grouped by what each app says it does. The largest group is Attack surface management.
| Type | Apps | Share | Examples |
|---|---|---|---|
| Attack surface management | 5 | 35.7% | AUTODIT, Crosslayer Labs, Panop |
| Vulnerability management | 3 | 21.4% | Flawatch, ProjectDiscovery, VeilScan |
| External threat monitoring | 2 | 14.3% | coocoor, Threatwatch360 |
The frameworks and hosting attack surface management apps are built on, as a share of the apps where each is known. Next.js is the most common framework.
Share of the 8 apps whose framework we could detect
Share of the 4 apps whose host we could detect
How attack surface management apps charge, starting with whether they show their prices. 53% publish a pricing page.
| Measure | Apps | Share of 17 |
|---|---|---|
| Publish a pricing page | 9 | 52.9% |
Attack surface management software maps and monitors everything an attacker can see and touch from the outside. You give it starting points, such as a company name, root domains, or IP ranges. Some tools also ingest asset inventories, cloud metadata, or code repository links to expand the search.
Common questions about attack surface management apps, answered with the figures on this page.
| Search | Per month, US | Cost per click |
|---|---|---|
| attack surface management solutions | 210 | - |
| external attack surface management | 210 | $91.45 |
| microsoft defender external attack surface management | 110 | $145.37 |
| external attack surface management tools | 70 | $54.08 |
| attack surface management vendors | 50 | $168.50 |
See more of what people search for
Create a free account to see more searches. All it takes is your email.
2 more types of attack surface management apps with Starter.See plans
The rest of the guide to attack surface management apps with Starter.See plans
3 more answers about attack surface management apps with Starter.See plans
