Skip to content
SPECIFICTION
Get listed

CTM360

ctm360.com

From $4.17/mo Free plan WebiOSAndroidAPI
Visit ctm360.com
Spec score 9.1 #1 of 26 in Digital Risk Protection Software

What it is

CTM360 is a cybersecurity platform for discovering vulnerabilities and managing threats across the surface, deep, and dark web. Its HackerView service finds digital assets, identifies issues, and passively maps an organization’s public digital presence. Security ratings cover 11 risk categories and more than 90 issues, with an A–F grade for each category. Other listed capabilities include phishing and brand protection, social media fraud monitoring, executive impersonation monitoring, and managed takedowns. ThreatCover provides curated threat feeds prioritized and mapped to the MITRE ATT&CK framework. RiskHub supports third-party security assessments using questionnaires, external monitoring, and internal security controls. CTM360 is available on the web and through an API, and describes setup as requiring no installation or configuration. It says its support is available 24 hours a day, 365 days a year. The Community Edition is free, limited to one authorized user per organization, and includes three free takedowns. Paid plans start at $5,000/yr+. Base-price managed services cover one brand and one primary domain with its subdomains; additional brands or primary domains incur extra charges.

Spec sheet

What it does
CTM360 is a consolidated external cybersecurity and digital-risk platform covering exposure discovery, threat intelligence, brand protection, monitoring and managed disruption.Read 15 Oct 2026 · ctm360.com
Integrations
The pricing comparison lists outbound integrations including Splunk, Slack and Jira, with additional integrations available.Read 15 Oct 2026 · ctm360.com
Support
CTM360 says its experienced team provides support 24 hours a day, 365 days a year.Read 8 Oct 2026 · ctm360.com
Headquarters
Kingdom of BahrainRead 28 Sep 2026 · ctm360.com
Founded
2014Read 28 Sep 2026 · ctm360.com
AI capabilities
CTM360 describes AI workflows for asset classification, image-similarity brand-abuse detection, threat correlation, contextual enrichment and takedown follow-up.Read 15 Oct 2026 · ctm360.com
API extensibility
ThreatCover states that APIs can connect it to SIEM, threat-intelligence and security-orchestration systems, with CSV and JSON exports and TAXII 1 and TAXII 2.1 feeds.Read 15 Oct 2026 · ctm360.com
Attack surface
HackerView provides automated asset discovery, issue identification, security ratings, and passive mapping of an organization’s digital presence using public data.Read 8 Oct 2026 · ctm360.com
Capterra feature listing
Capterra lists API access, third-party integrations, risk scoring, vulnerability scanning, incident management and threat intelligence among CTM360 capabilities.Read 15 Oct 2026 · capterra.com
Community Edition limits
The free edition is limited to one authorized user per organization and remains available until revoked by the user or CTM360.Read 15 Oct 2026 · ctm360.com
Company founder
Crunchbase lists Mirza Asrar Baig as founder and CEO.Read 15 Oct 2026 · crunchbase.com
Company headquarters and founding
LinkedIn lists headquarters in Manama, Bahrain, and a 2014 founding year.Read 15 Oct 2026 · linkedin.com
Company legal name
Crunchbase identifies the legal entity as CTM360 W.L.L., a private for-profit company and sub-organization of EDX Labs.Read 15 Oct 2026 · crunchbase.com
Company size
LinkedIn lists CTM360 in the 51–200 employee range.Read 15 Oct 2026 · linkedin.com
Data-leakage monitoring
The service monitors repositories, breach databases, malware logs, underground forums, Telegram, GitHub and cloud-storage platforms for exposed code, credentials, keys and sensitive records.Read 15 Oct 2026 · ctm360.com
Deployment model
The terms describe CTM360 as a secure internet portal provided on an annual subscription basis rather than software installed on customer infrastructure.Read 15 Oct 2026 · ctm360.com
Digital risk protection
CyberBlindspot monitors surface, deep and dark web sources for phishing, impersonation, leaked credentials, malicious applications and related fraud.Read 15 Oct 2026 · ctm360.com
External attack-surface management
Its HackerView platform discovers and maps internet-facing domains, subdomains, certificates, IP addresses and technologies without requiring customer installation or configuration.Read 15 Oct 2026 · ctm360.com
Free access limits
The Community Edition includes three free takedowns, is limited to one authorized user per organization, and receives platform support.Read 8 Oct 2026 · ctm360.com
Funding
Crunchbase shows one angel funding round but obscures the monetary amount.Read 15 Oct 2026 · crunchbase.com
Licence
The platform is proprietary: customers receive a non-exclusive, non-transferable limited licence, and the agreement prohibits resale, hosting, reverse engineering and derivative works.Read 15 Oct 2026 · ctm360.com
Limit: false positives
A Gartner reviewer complained about inaccurate information, false positives and incorrect severity ratings.Read 15 Oct 2026 · gartner.com
Limit: feature learning curve
G2's review analysis reports that some users initially struggle to understand all features.Read 15 Oct 2026 · ai.g2.com
Limit: internal integrations
G2's review analysis reports challenges integrating CTM360 with customers' internal tools.Read 15 Oct 2026 · ai.g2.com
Limit: takedown delays
G2's review analysis mentions occasional delays in takedown actions.Read 15 Oct 2026 · ai.g2.com
Limit: threat-report timeliness
A Gartner reviewer reported cases where its internal team identified threats before CTM360 reported them and questioned the originality of some intelligence.Read 15 Oct 2026 · gartner.com
Managed takedowns
CTM360 says its Cyber Incident Response Team manages takedowns through more than 150 reporting APIs and can contain threats in as little as six minutes.Read 15 Oct 2026 · ctm360.com
Mobile app functions
The Android app provides real-time alerts, feedback to CTM360, takedown actions and a consolidated experience formerly split among HackerView, CyberBlindspot and CyNA.Read 15 Oct 2026 · play.google.com
Notable news
CTM360 announced on October 14, 2026 that Info-Tech Research Group named it a 2026 Innovator of the Year winner.Read 15 Oct 2026 · ctm360.com
Praise: monitoring value
A Gartner reviewer said continuous monitoring of exposed assets and leaked data reduced the need to manually search forums and the dark web.Read 15 Oct 2026 · gartner.com
Praise: usability and detection
G2's review analysis says users repeatedly praise the dashboard's usability, easy setup, threat detection, brand protection and actionable insights.Read 15 Oct 2026 · ai.g2.com
Pricing qualification
The pricing page says managed services at the base price apply to one brand with one primary domain and its subdomains, while additional brands or primary domains incur additional charges.Read 8 Oct 2026 · ctm360.com
Product scope
CTM360 describes its platform as identifying vulnerabilities and detecting, managing, and responding to threats across the surface, deep, and dark web.Read 8 Oct 2026 · ctm360.com
Rating on Capterra
0.0 out of 5 from 0 reviewsRead 15 Oct 2026 · capterra.com
Rating on G2
4.6 out of 5 from 178 reviewsRead 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.7 out of 5 from 127 reviewsRead 15 Oct 2026 · gartner.com
Rating on Google Play
No user rating or review count is displayed; the listing shows 1K+ downloads.Read 15 Oct 2026 · play.google.com
Risk ratings
HackerView security ratings cover 11 risk categories and over 90 issues, with an A–F grade for each category.Read 8 Oct 2026 · ctm360.com
Security and liability terms
CTM360 disclaims responsibility for outages, third-party actions and misuse, and limits liability under its standard terms to the subscriber's annual subscription amount.Read 15 Oct 2026 · ctm360.com
Security assessment
RiskHub supports third-party security assessments using questionnaires, external monitoring, and internal security controls.Read 8 Oct 2026 · ctm360.com
Setup
CTM360 describes its turnkey solution as requiring no installations or configurations.Read 8 Oct 2026 · ctm360.com
Support model
Community Edition support is delivered through the platform; paid tiers add knowledge-base, email, phone and 24×7×365 support options.Read 15 Oct 2026 · ctm360.com
Takedown success claim
The company states that its global takedown network achieves a 98% success rate and provides post-takedown metrics such as response time and escalation effectiveness.Read 15 Oct 2026 · ctm360.com
Threat intelligence
ThreatCover supplies curated intelligence, MITRE ATT&CK mappings, interactive graphs and feeds in STIX 2.1, XML, YARA, JSON and PDF formats.Read 15 Oct 2026 · ctm360.com

Plans and prices

Community Edition Free 1 authorized user per organization · monthly data refresh · 3 free takedowns · platform support Read 15 Oct 2026 · ctm360.com
CyNA Premium Monthly $4.99 a month auto-renewing monthly Available to eligible Business Verified Users Read 15 Oct 2026 · ctm360.com
CyNA Premium Yearly $49.99 a year auto-renewing yearly Available to eligible Business Verified Users Read 15 Oct 2026 · ctm360.com
Restricted $5,000 a year per year+ Fortnightly data refresh · 1 user · limited external attack-surface features Read 15 Oct 2026 · ctm360.com
Restricted (External Attack Surface Management) $5,000 a year $5,000/yr+ Fortnightly data refresh Read 8 Oct 2026 · ctm360.com
Basic $10,000 a year per year+ Fortnightly data refresh · 3 users · 25 issue rescans per month Read 15 Oct 2026 · ctm360.com
Basic (External Attack Surface Management) $10,000 a year $10,000/yr+ Fortnightly data refresh Read 8 Oct 2026 · ctm360.com
Phishing Protection $15,000 a year $15,000/yr+ Basic use cases Read 8 Oct 2026 · ctm360.com
Advanced $25,000 a year per year+ Weekly data refresh · 5 users · 100 issue rescans per month Read 15 Oct 2026 · ctm360.com
Advanced (External Attack Surface Management) $25,000 a year $25,000/yr+ Weekly data refresh Read 8 Oct 2026 · ctm360.com
Phishing & Social Media Protection $25,000 a year $25,000/yr+ + Brand use cases Read 8 Oct 2026 · ctm360.com
Brand Protection $35,000 a year $35,000/yr+ + VIP protection Read 8 Oct 2026 · ctm360.com

Every CTM360 plan and price →

Strong points and limits

Strong points

  • HackerView rates 11 categories and over 90 issues.
  • ThreatCover maps curated feeds to MITRE ATT&CK.
  • RiskHub supports third-party security assessments.
  • Web and API access; no installation or configuration required.

Limits

  • Community Edition allows one authorized user per organization.
  • Free Community Edition includes three takedowns.
  • Paid plans start at $5,000/yr+.
  • Additional brands or primary domains incur charges.

Who it suits

CTM360 suits organizations seeking digital asset discovery, threat protection, or third-party security assessments. Its free Community Edition is limited to one authorized user per organization.

CTM360 in depth

Read the full write-up

CTM360 is a web and API security platform spanning external asset management, digital risk protection, threat intelligence, and third-party assessment. It is best suited to organizations that want those capabilities under one provider; its breadth comes with annual plans starting at $5,000/yr+ and a sharply limited free edition.

The strongest case for CTM360 is the combination of exposure mapping and managed digital-risk services. Buyers with narrower needs or smaller budgets should compare the focused alternatives before committing.

Overview

CTM360 covers threats across the surface, deep, and dark web. Its capabilities range from discovering public-facing assets to monitoring phishing, brand and social-media fraud, executive impersonation, and assessing third parties. This scope can help security teams consolidate related work, but the plan ladder separates functions and raises the cost as coverage expands.

CTM360 describes its turnkey service as requiring no installation or configuration and says its team provides support 24 hours a day, 365 days a year. Those assurances suit organizations looking for supported coverage rather than a self-managed tool alone.

Key features

Attack-surface discovery and ratings

HackerView uses public data for passive mapping, automated asset discovery, issue identification, and security ratings. It supports external and cloud asset discovery. Ratings span 11 risk categories and more than 90 issues, with an A–F grade for each category. That gives teams a structured way to prioritize exposure; data refresh cadence varies by plan, from fortnightly on lower tiers to weekly or real-time on higher tiers.

Digital risk protection and intelligence

CTM360 offers phishing and brand protection, social-media fraud monitoring, executive impersonation monitoring, and managed takedowns. ThreatCover supplies curated threat feeds prioritized and mapped to MITRE ATT&CK. The pricing page also lists outbound integrations including Splunk, Slack, and JIRA, which may help teams route findings into existing workflows.

Third-party assessments

RiskHub supports third-party security assessments through questionnaires, external monitoring, and internal security controls. This is useful for organizations that need vendor assessment alongside external exposure monitoring, though the available plan descriptions do not establish that every tier includes RiskHub.

Pricing

CTM360 is freemium, but the free Community Edition is constrained: one authorized user per organization, three free takedowns, platform support, and access until revoked. It is a way to start with the platform, not a substitute for broader team use or ongoing takedown volume.

Paid plans are billed annually and priced from $5,000/yr+. The External Attack Surface Management tiers are Restricted at $5,000/yr+ and Basic at $10,000/yr+, both with fortnightly data refresh; Advanced is $25,000/yr+ with weekly refresh; Enterprise is $50,000/yr+ with real-time refresh up to 48 hours. Buyers prioritizing faster refresh pay substantially more, while lower tiers mean slower updates.

Digital-risk plans are Phishing Protection at $15,000/yr+ for basic use cases; Phishing & Social Media Protection at $25,000/yr+ adds brand use cases; Brand Protection at $35,000/yr+ adds VIP protection; Advanced Digital Risk Protection is $42,500/yr+ and adds data leakage; Enterprise Digital Risk Protection starts at $67,500/yr+ and includes all use cases. These steps make the scope trade-off explicit, but combining broad coverage can become a significant annual commitment.

At the base price, managed services cover one brand with one primary domain and its subdomains. Additional brands or primary domains incur extra charges, so organizations with multiple brands should account for that before comparing headline prices.

Platforms

CTM360 is available on the web and through an API. Its external asset discovery includes cloud assets, and platform monitoring frequency is listed as daily; the external attack-surface plans specify their own refresh cadence, including fortnightly, weekly, or real-time refresh on higher tiers.

Who it's for

CTM360 fits security teams that need external attack-surface management alongside brand and phishing protection, threat feeds, or third-party assessment, especially when managed support and takedowns matter. It is less suitable for single-user buyers seeking broad free coverage, organizations needing frequent refresh at a low price, or companies with many brands and domains that need predictable base pricing.

Pros and cons

Pros: HackerView combines asset discovery, issue identification, and graded ratings across 11 categories and more than 90 issues, giving teams a structured exposure view.

Pros: The platform spans attack-surface management, digital risk protection, threat intelligence, and third-party assessment, with outbound integrations including Splunk, Slack, and JIRA.

Pros: The Community Edition includes three takedowns and platform support, and remains accessible until revoked.

Cons: Free access is limited to one authorized user per organization and only three takedowns, so it is restrictive for shared team operations or recurring response needs.

Cons: Paid pricing starts at $5,000/yr+, with faster refresh and broader use cases on much more expensive tiers.

Cons: The base managed-services scope covers one brand and one primary domain with subdomains; additional brands or domains bring added charges.

Alternatives

Choose PhishEye if a free phishing-focused option is a better fit: its free plan covers one monitored brand and one typosquat scan, keeps 30 days of scan history, and excludes takedown cases or requests.

SOCRadar Extended Threat Intelligence Platform offers freemium access and paid dark-web monitoring plans starting at $600 a month for one domain and one seat; consider it when that narrower monitoring scope and monthly pricing better suit your needs.

Styx Platform has a free Basic plan with caps of five domains, 100 subdomains, five brands, five executives, and five third parties or vendors, plus six takedowns per year and two analyst licences. It is worth comparing when those limits cover your organization.

Flare offers a free 14-day trial scoped to your domain, with no payment information required but an identity-verification call required.

Group-IB Attack Surface Management is another paid attack-surface option, with pricing based on the total number of confirmed external assets.

KELA Platform provides a 30-day trial without commitment or payment details and a Cloud Attack Surface Management plan at $65,000 a year on a 12-month contract; consider it if that specific scope and term suit your procurement needs.

Memcyco Digital Risk Protection is another option to compare for digital risk protection.

Obscuryn offers paid domain monitoring, with a Starter plan at $150 a month for up to five domains and a Professional plan at $300 a month for up to 25 domains and five VIP users; consider it when a smaller domain-monitoring scope is sufficient.

For broader category comparisons, see Digital Risk Protection Software and Attack Surface Management Software.

Verdict

Choose CTM360 if your organization wants attack-surface discovery alongside managed digital risk protection, threat intelligence, and third-party assessment, and can budget for an annual service whose breadth and refresh rate determine the price. Look elsewhere if you need broad multi-user free access, low-cost frequent updates, or predictable pricing across multiple brands and primary domains.

Verdict

CTM360 combines attack-surface discovery, digital risk protection, and security assessment tools. Check the Community Edition’s user and takedown limits, and note the additional charges for brands or domains beyond the base scope.

Where Specifiction places it

Alternatives to CTM360All alternatives →