Group-IB Attack Surface Management

Plans and prices

Every plan, in full

On the record

Asset inventory

Users can confirm or ignore discovered internet-facing assets to maintain an up-to-date external asset inventory.group-ib.com · read 30 Sep 2026

Deployment and collection

The product requires no agents, new instances, integrations, or major configurations for initial mapping, and the maker says discovery uses passive data collection.group-ib.com · read 30 Sep 2026

Discovery

Entering an organization’s domain lets the system identify and map its infrastructure using asset relationships such as subdomains, SSL certificates, and DNS records.group-ib.com · read 30 Sep 2026

Integrations

ASM offers a REST API for connecting SIEM, ticketing, and other security operations tools, native AWS and Azure cloud integrations, plus Postman collections and a Python library.group-ib.com · read 30 Sep 2026

Intended users

The product page describes use by enterprises seeking external attack surface visibility and gives examples of security teams using it to monitor assets, vulnerabilities, and threats.group-ib.com · read 30 Sep 2026

Issue workflow

Issues on confirmed assets can be marked Under Review, Solved, Ignored, or False Positive, and users can create tickets for remediation.group-ib.com · read 30 Sep 2026

Plan distinction

The 3rd Party Risk plan adds customized asset discovery for third parties and third-party cyber risk scoring; active scanning is also listed in the feature matrix.group-ib.com · read 30 Sep 2026

Plan features

The feature matrix lists continuous automated external asset discovery, validation and risk assessment, issue prioritization and ticketing, threat intelligence insights, visual mapping, and a graph research tool for the Standard License.group-ib.com · read 30 Sep 2026

Purpose

The platform maps external assets, monitors the attack surface continuously, and enriches findings with threat intelligence to assess risk and prioritize issues.group-ib.com · read 30 Sep 2026

Security certification

Group-IB’s certificates page lists its management system as certified to ISO 27001:2022 and ISO 9001:2015.group-ib.com · read 30 Sep 2026

Support and onboarding

The plan matrix lists a service desk, onboarding training, unlimited API access, and unlimited users for the Standard License and 3rd Party Risk module.group-ib.com · read 30 Sep 2026

Threat intelligence

Confirmed assets are checked against threat intelligence that includes credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity.group-ib.com · read 30 Sep 2026

Trial limits

The 21-day trial covers up to five domains and unlimited assets, includes reports and API data export, and ends automatically when the period expires.group-ib.com · read 30 Sep 2026

Trial scan scope

The trial covers common ports only; full port scans and active scanning capabilities are listed as options for paid licenses.group-ib.com · read 30 Sep 2026

Alternatives to Group-IB Attack Surface Management

AP AttackIQ PlatformWebWindows+4 C CTM360AndroidiPhone & iPad+2 R runZeroWebWindows+4 I ImmuniWebAndroidiPhone & iPad+2 MD Microsoft Defender for BusinessAndroidiPhone & iPad+3 F FullHuntWebAPI SE SOCRadar Extended Threat Intelligence PlatformWebAPI DS Detectify Surface MonitoringWebAPI

Every alternative, ranked