- Home
- Exposure Management Software
- TrollEye CTEM Platform
TrollEye CTEM Platform
Cumming, Georgia, United States
What it is
TrollEye CTEM Platform is a web service for scoping, discovering, prioritizing, validating, and mobilizing remediation for security exposures. It assesses applications, cloud, infrastructure, identities, endpoints, networks, code repositories, and third parties. Prioritization combines contextual risk scoring, attack-path analysis, threat intelligence, asset criticality, and compensating-control context. Validation options include automated checks, manual penetration testing, control-effectiveness testing, and proof of exploitability. Remediation features provide role-based workflows, Jira and ticket synchronization, root-cause analysis, and remediation initiatives. Listed integrations include GitHub, Jira, Azure DevOps, Slack, Microsoft Teams, AWS, and Microsoft Azure. TrollEye says AI agents correlate exposure data, identify potentially exploitable attack paths, and recommend actions. CTEM packages include regular cadence calls. Pricing starts at $995/mo, with a 14-day trial and no free plan.
For and against
For
- Covers applications, cloud, identities, and third parties
- Uses contextual risk and attack-path analysis
- Offers automated and manual validation options
- Includes remediation workflows and ticket synchronization
- Provides a 14-day free trial
Against
- No free plan is listed
- Starts at $995/mo
- SOC 2 support does not replace CPA examination
- Enterprise pricing is custom
The verdict
TrollEye brings exposure discovery, prioritization, validation, and remediation workflows into one web platform. Its package levels and integrations support different security-program sizes, while compliance evidence has defined limits.
Who it suits
TrollEye suits focused, growing, mature, and enterprise security teams managing broad exposure programs. Its packages are described for teams ranging from focused groups to enterprise environments.
Plans and prices
CTEM Essentials
200 AI vulnerability analyses/month · 4 Apex autonomous engagements/month · 1 business unit · 1 cloud account
Read 4 Oct 2026 · trolleyesecurity.com
CTEM Growth
1,500 AI vulnerability analyses/month · 12 Apex autonomous engagements/month · 2 business units · 6 cloud accounts
Read 4 Oct 2026 · trolleyesecurity.com
CTEM Professional
5,000 AI vulnerability analyses/month · 32 Apex autonomous engagements/month · 6 business units · 20 cloud accounts
Read 4 Oct 2026 · trolleyesecurity.com
CTEM Enterprise
Custom analysis and engagement capacity · 6+ business units · 20+ cloud accounts · 20,000+ workloads
Read 4 Oct 2026 · trolleyesecurity.com
On the record
- AI agents
- TrollEye says its AI agents correlate exposure data, surface exploitable attack paths, and recommend remediation actions.trolleyesecurity.com · read 4 Oct 2026
- Asset coverage
- It assesses applications, cloud, infrastructure, identities, endpoints, networks, code repositories, and third parties.trolleyesecurity.com · read 4 Oct 2026
- Compliance scope
- TrollEye says it supports technical security operations and evidence for SOC 2 but does not replace the CPA firm, formal examination, or broader GRC process.trolleyesecurity.com · read 4 Oct 2026
- Integrations
- The platform page lists GitHub, Jira, Azure DevOps, Slack, Microsoft Teams, AWS, and Microsoft Azure as integrations.trolleyesecurity.com · read 4 Oct 2026
- Intended teams
- The pricing page describes Essentials for focused teams, Growth for growing security programs, Professional for mature programs, and Enterprise for enterprise environments.trolleyesecurity.com · read 4 Oct 2026
- Prioritization
- Native prioritization capabilities include context-based risk scoring, attack-path analysis, threat intelligence, and compensating-control context.trolleyesecurity.com · read 4 Oct 2026
- Purpose
- The platform scopes, discovers, prioritizes, validates, and mobilizes remediation for security exposures.trolleyesecurity.com · read 4 Oct 2026
- Remediation workflows
- It offers role-based workflows, Jira and ticket synchronization, root-cause analysis, and remediation initiatives.trolleyesecurity.com · read 4 Oct 2026
- Security evidence
- The SOC 2 solution page says TrollEye preserves findings, testing results, ownership, remediation, retesting, and verification history to support SOC 2 evidence.trolleyesecurity.com · read 4 Oct 2026
- Support
- Every CTEM package includes regular cadence calls with the TrollEye team.trolleyesecurity.com · read 4 Oct 2026
- Trial
- The site advertises an eligible 14-day free trial of the CTEM platform.trolleyesecurity.com · read 4 Oct 2026
- Validation
- The platform lists automated validation, manual penetration testing, control-effectiveness testing, and proof of exploitability.trolleyesecurity.com · read 4 Oct 2026
