Tool profile
Searchlight Exposure: cost, fit and limits
Searchlight Exposure is an external attack surface management product made by Searchlight Cyber Ltd, formerly sold as Assetnote, that discovers and validates internet-facing assets, web applications, APIs and cloud infrastructure. It is sold on request.
What to know first
Searchlight Exposure is part of Searchlight's Preemptive Threat Exposure Management platform, alongside Searchlight Threat, a dark web monitoring product. The product page shows only a demo call to action, with no pricing, plans, certifications or AI features. Its stated approach is to prove each exposure before routing it into Splunk, Jira or a SIEM or SOAR tool. A buyer should plan for a demo.
Searchlight Exposure at a glance
| Maker | Searchlight Cyber Ltd, United Kingdom |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | Yes |
| Category | Best AI Attack Surface Management Software in 2026, rank 10 of 10 |
| Website | slcyber.io |
Who Searchlight Exposure is best for
Teams that triage validated findings
The page says every finding is proven before it lands, so security staff who dislike raw scanner output may prefer fewer, confirmed items.
Splunk and Jira shops
Confirmed exposures route into Splunk, Jira and a SIEM or SOAR, which fits teams that already work from those queues.
Teams wanting dark web context
Searchlight Threat monitors clear, deep and dark web sources for signs that attackers target the organization, and sits on the same platform.
Searchlight Exposure plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Searchlight Exposure | Not shown, demo required | Continuous discovery and validation of external exposures across web apps, APIs, cloud infrastructure, DNS, certificates and subdomains. |
| Searchlight Threat | Not shown, demo required | Monitoring of clear, deep and dark web sources for signs that attackers are targeting the organization. |
| Preemptive Threat Exposure Management platform | Not shown | The combined platform that the two products belong to; the product page offers only a Book a Demo option and lists no tiers. |
Checked November 2026.
What Searchlight Exposure does
- Continuous discovery
- The product continuously discovers external assets across web applications, APIs, cloud infrastructure, DNS, certificates and subdomains. Subdomains and certificates are included in the scope. Discovery runs continuously.
- Proven findings
- The page states every finding is proven before it lands, meaning exposures are validated before being passed to analysts. Analysts therefore receive fewer unconfirmed items.
- Routing to existing tools
- Confirmed exposures are sent to Splunk, Jira and the customer's SIEM or SOAR, per the product page. A separate integrations page exists that we did not read.
- Dark web signals
- Searchlight Threat adds monitoring of clear, deep and dark web sources, so exposure data can be read next to evidence of attacker interest. That makes the platform broader than an inventory tool.
- Assetnote lineage
- The attack surface product was previously called Assetnote and was renamed Searchlight Exposure, which matters for buyers who find older documentation. Search for both names when reading older reviews or documentation.
How Searchlight Exposure handles your data
The privacy policy names Searchlight Cyber Ltd, registered in England and Wales under number 10765196, with a UK office in Portsmouth and a US office in Newburyport, Massachusetts. It says customer login data is held in the United Kingdom or EU and file storage sits on Searchlight servers in the United Kingdom. The baseline retention period for personal information is 6 months. It makes no AI statement and no profiling, and it applies to personal information, so how scan data is stored was not checked.
Where Searchlight Exposure falls short in practice
- No visible pricing or plan. The product page shows only a demo request, so a buyer cannot compare cost, asset limits or tiers beforehand. Ask for the billing unit and renewal terms in writing.
- No certification or AI detail. The page names no certification and no AI features, so security reviews will depend on documents the vendor supplies on request. Ask which attestations the vendor will share under NDA.
- Policy covers personal data. The privacy policy describes personal information rather than customer scan data, so the location of scan results needs a separate written answer. Ask for a data processing agreement that names storage locations.
Works with
Alternatives to Searchlight Exposure
Searchlight Exposure: common questions
Is Searchlight Exposure the same as Assetnote?
Yes. The product page says Assetnote's attack surface management platform is now called Searchlight Exposure. It belongs to the Searchlight Preemptive Threat Exposure Management platform. Older Assetnote documentation may still circulate under the former name. Both names refer to one product.
What does Searchlight Exposure cost?
The product page shows no price and offers a Book a Demo option only. Ask for the unit used for billing, such as assets or domains, before comparing it with tools that print prices. Ask for a pilot quote on your domains.
Where is Searchlight's headquarters?
The privacy policy names Searchlight Cyber Ltd, registered in England and Wales, with a UK office in Portsmouth and a US office in Newburyport, Massachusetts. The page does not name a headquarters, so rely on the registered entity. It lists no further office details.
Which tools receive Searchlight findings?
The product page lists Splunk, Jira and a customer's SIEM or SOAR as destinations for confirmed exposures. The integrations page may list more, but it was not read here. The integrations page may list more but it was not opened.
Does Searchlight use AI?
The pages we opened mention no AI features. The vendor's emphasis is on validating findings before they are delivered, so ask directly how validation works and whether machine learning is involved. Treat any AI claim as unverified until the vendor documents it.