CTM360

CTM360 is a cybersecurity platform for identifying vulnerabilities and detecting, managing, and responding to threats across the surface, deep, and dark web. HackerView discovers digital assets, identifies issues, assigns security ratings, and passively maps an organization’s public digital presence. Its ratings cover 11 risk categories and more than 90 issues, with an A–F grade for each category. Digital risk capabilities include phishing and brand protection, social media fraud monitoring, executive impersonation monitoring, and managed takedowns. ThreatCover provides curated threat feeds prioritized and mapped to the MITRE ATT&CK framework. RiskHub supports third-party security assessments using questionnaires, external monitoring, and internal security controls. The service is available through web and API, and CTM360 says its turnkey setup requires no installation or configuration. Community Edition is free, limited to one authorized user per organization, and includes three free takedowns. Paid plans start at $5,000/yr. Base-price managed services cover one brand and one primary domain with its subdomains; additional brands or primary domains incur additional charges. CTM360 was founded in 2014 and is headquartered in the Kingdom of Bahrain.

CTM360 combines asset discovery, risk ratings, threat feeds, and digital risk protection. Organizations should review the single-user free tier and the scope covered by base-price managed services before choosing a plan.

CTM360 suits organizations looking to monitor digital assets, assess external risks, or manage brand and phishing threats. Community Edition is limited to one authorized user per organization.

CTM360 is a cybersecurity platform for organizations that need to manage exposed assets and digital risks across the surface, deep, and dark web. It suits security teams looking to bring external attack-surface management, brand protection, threat intelligence, and third-party assessment together. Its breadth is useful, but paid plans start at $5,000/yr+ and the free edition allows only one user.

Overview

CTM360 combines several security functions in one platform. HackerView maps an organization’s digital presence using public data, identifies assets and issues, and assigns security ratings. Other capabilities cover phishing and brand protection, social-media fraud, executive impersonation, managed takedowns, threat intelligence, and third-party security assessments.

HackerView rates 11 risk categories from A to F and covers more than 90 issues, giving teams a structured view of exposure. The platform also supports cloud asset discovery, and CTM360 describes setup as requiring no installation or configuration. Its stated 24/7, year-round support is useful for organizations relying on managed security services, but the annual prices make this a substantial commitment.

Key features

External attack-surface management

HackerView automates asset discovery, issue identification, security ratings, and passive mapping from public data. That makes it relevant to teams tracking internet-facing assets and exposure without relying solely on internal inventories. Data refresh ranges from fortnightly on the lower-priced External Attack Surface Management tiers to weekly on Advanced and real-time refresh, up to 48 hours, on Enterprise. Buyers should weigh that cadence against how quickly their environment changes.

Digital risk protection and threat intelligence

CTM360 covers phishing and brand protection, social-media fraud, executive impersonation, and managed takedowns. The Community Edition’s three free takedowns offer a limited way to address incidents, but they are unlikely to support a sustained protection program. ThreatCover adds curated threat feeds prioritized and mapped against MITRE ATT&CK, while integrations include Splunk, Slack, and JIRA. This mix should appeal to teams that want intelligence connected to existing workflows.

Third-party assessment

RiskHub supports third-party security assessments through questionnaires, external monitoring, and internal security controls. It gives organizations a way to include vendor risk in the same platform as their own external exposure, though the range of capabilities may be more than a team seeking only brand monitoring needs.

Pricing

CTM360 is freemium, with paid plans billed annually and starting at $5,000/yr+. The Community Edition costs nothing and includes platform access, platform support, and three free takedowns. It is limited to one authorized user per organization, with access remaining until revoked, so it is better for an individual evaluating the platform than for a collaborative security team.

External Attack Surface Management tiers are Restricted at $5,000/yr+ and Basic at $10,000/yr+, both with fortnightly data refresh; Advanced at $25,000/yr+ with weekly refresh; and Enterprise at $50,000/yr+ with real-time refresh up to 48 hours. Restricted is the lowest-cost route into paid surface management, while the higher tiers buy faster refresh. Phishing Protection starts at $15,000/yr+ for basic use cases; Phishing & Social Media Protection is $25,000/yr+ and adds brand use cases. Brand Protection costs $35,000/yr+ and adds VIP protection. Advanced Digital Risk Protection is $42,500/yr+ and adds data leakage, while Enterprise Digital Risk Protection starts at $67,500/yr+ and includes all use cases.

The listed managed-services base price covers one brand with one primary domain and its subdomains. Additional brands or primary domains incur extra charges, so organizations with multiple brands should account for that before comparing plan totals. Pricing is annual; the free edition has no stated expiry, but its single-user cap and three-takedown allowance limit its practical reach.

Platforms

CTM360 is available through web and API platforms. External and cloud asset discovery are supported, with monitoring frequency listed as daily; the External Attack Surface Management plan descriptions specify their own refresh cadences.

Who it's for

CTM360 is a strong fit for organizations that need a broad external security program spanning asset discovery, digital risk protection, threat intelligence, and supplier assessments, especially when managed services and around-the-clock support matter. It is less suitable for small teams with tight budgets, organizations needing several free user seats, or buyers who only want a narrowly scoped brand-protection tool.

Pros and cons

Pros

• Combines external asset discovery, risk ratings, digital risk protection, threat feeds, and third-party assessments in one platform.
• HackerView covers 11 risk categories and more than 90 issues, with an A–F grade for each category.
• Higher External Attack Surface Management tiers offer faster refresh, up to real-time coverage with a 48-hour limit on Enterprise.
• Community Edition includes three takedowns and platform support, with access remaining until revoked.

Cons

• Paid plans start at $5,000/yr+, making the platform a substantial purchase for smaller organizations.
• The free edition allows only one authorized user per organization and three takedowns.
• The base managed-services price covers only one brand and one primary domain with its subdomains; additional coverage costs more.
• The cheapest paid surface-management tiers refresh data fortnightly, which may not suit teams needing faster visibility.

Alternatives

For a broader attack-surface shortlist, see Attack Surface Management Software; for protection centered on brand and digital risks, compare the Digital Risk Protection Software category.

• Memcyco Digital Risk Protection suits buyers seeking a paid option with Android, iOS, API, and web access; a free demo is available and pricing is by contact.
• PhishEye is a better fit for a free, narrowly scoped start: its free plan monitors one brand and includes one typosquat scan, 30-day scan history, and no takedown requests.
• Styx Platform is worth comparing for teams whose needs fit its free Basic plan, which includes up to five domains, five brands, five executives, and six takedowns per year.
• SOCRadar Extended Threat Intelligence Platform offers a lower-cost entry for dark-web monitoring, with an Essential plan at $600 a month for one domain and one seat.
• Doppel Digital Risk Protection is another paid digital-risk option, with pricing by demo request.
• Seqrite Digital Risk Protection Service offers a tailored plan for organizational requirements.
• Allure Brand Protection may suit buyers seeking flat-rate pricing without per-incident fees or takedown limits.
• Axur Platform offers custom demos with pricing and bundles tailored to customer needs.

Verdict

Choose CTM360 if your organization wants one platform for external asset management, digital risk protection, threat intelligence, and third-party assessments, and can support annual pricing from $5,000/yr+. Its strongest case is breadth paired with managed protection and faster refresh options on upper tiers. Look elsewhere if you need multiple free seats, a few low-cost takedowns, or coverage across several brands without additional charges.