Category
AI attack surface management software: what they are and who makes them
self-serve external scanners, asset inventory and network discovery, offensive validation platforms, external threat intelligence suites: Attaxion, runZero, Detectify through Searchlight Exposure.
Types of AI attack surface management software
Self-serve external scanners
Attaxion, Intruder and Detectify let a small team sign up, enter a domain and see findings within the day. Attaxion and Detectify print entry prices, and Intruder offers a free tier. They suit companies with a handful of domains and no dedicated exposure analyst.
Asset inventory and network discovery
runZero and Censys center on knowing what exists. runZero covers internal and external devices, including operational technology, while Censys sells search over an internet-wide dataset. They fit teams that start from an asset inventory problem rather than from a pentest gap.
Offensive validation platforms
Hadrian, ProjectDiscovery and Searchlight Exposure pair discovery with proof of exploitability. Agents log in, chain steps and report only confirmed paths. They suit security teams that already drown in unverified alerts and want fewer, better tickets, even if that means paying for depth.
External threat intelligence suites
CybelAngel and ONYPHE blend attack surface data with leaked credentials, dark web monitoring or internet-wide scan datasets. Both are French vendors, and they suit analysts who want exposure and threat context in one feed instead of one more scanner to babysit.
Facts at a glance
| Tool | Publisher | Based in | Access |
|---|---|---|---|
| Attaxion | Attaxion, LLC | United States | Trial + API |
| runZero | runZero, Inc. | United States | Free tier + API |
| Detectify | Detectify AB | Sweden | Free tier + API |
| Intruder | Intruder Systems Ltd | United Kingdom | Free tier + API |
| ProjectDiscovery | ProjectDiscovery, Inc. | United States | Free tier + API |
| Hadrian | Hadrian Security B.V. | Netherlands | Paid + API |
| Censys | Censys, Inc. | United States | Free tier + API |
| CybelAngel | CybelAngel | France | Paid + API |
| ONYPHE | ONYPHE SAS | France | Paid + API |
| Searchlight Exposure | Searchlight Cyber Ltd | United Kingdom | Paid + API |
