Skip to content
SPECIFICTION
Get listed

FullHunt

fullhunt.io

From $149/mo Free plan WebAPI
Visit fullhunt.io
Spec score 8.8 #3 of 33 in Attack Surface Management Software

What it is

FullHunt provides internet intelligence for security products and external attack surface monitoring, through web access, APIs, data feeds, and MCP. It discovers internet-facing domains, subdomains, IPs, cloud services, ports, technologies, and certificates. Continuous monitoring follows new assets, service and certificate changes, configuration drift, and exposure alerts. Its vulnerability intelligence links CVEs to observed assets with exploit context, EPSS scores, and CISA KEV status. Enterprise workflows also cover compromised credentials, infostealer activity, typosquatting, and phishing infrastructure tied to monitored organizations. Listed integrations include security platforms, ticketing systems, and collaboration tools such as Splunk, Jira, Slack, and Microsoft Teams. Developers can use REST APIs, a Python SDK, and MCP tools; API requests use credits that reset monthly. Plans range from a free option with 10 credits per month to paid plans from $149 a month. A 14-day trial is listed for qualified Enterprise organizations. Users must have lawful authority to monitor submitted assets and use the service for legitimate cybersecurity purposes.

Spec sheet

What it does
FullHunt provides external attack-surface management and internet-intelligence APIs for discovering, monitoring and assessing internet-facing assets.Read 15 Oct 2026 · fullhunt.io
Product
FullHunt provides internet intelligence infrastructure for security products and external attack surface monitoring through APIs, data feeds, and MCP.Read 4 Oct 2026 · fullhunt.io
Audience
The maker positions the products for security vendors and builders, enterprise security teams, and MSSPs operating across client environments.Read 4 Oct 2026 · fullhunt.io
Integrations
Listed integrations include Splunk, Sumo Logic, Cortex XSOAR, FortiSOAR, Mindflow, Jira, ServiceNow, Slack, Microsoft Teams and custom webhooks.Read 15 Oct 2026 · fullhunt.io
Support
FullHunt states that its support team is available around the clock; Enterprise deployments include a dedicated team with 24/7 support.Read 4 Oct 2026 · fullhunt.io
API and SDKs
FullHunt offers documented REST APIs, a Python SDK and a native Model Context Protocol server for compatible AI clients.Read 15 Oct 2026 · fullhunt.io
API authentication
API requests use an X-API-KEY header, with standard and dedicated enterprise API hosts and versioned /api/v1/ endpoints.Read 15 Oct 2026 · docs.fullhunt.io
API documentation
The current documentation covers generated OpenAPI references, resource catalogues and OEM, Nexus, enterprise and agent API surfaces.Read 15 Oct 2026 · fullhunt.io
API limits
The legacy API documentation states a 60-request-per-minute limit for several endpoints and limits community data-intelligence results to 100 records per query.Read 15 Oct 2026 · api-docs.fullhunt.io
Asset discovery
The platform enumerates domains, subdomains, IPs, cloud services, ports, technologies and certificates from public internet observations.Read 15 Oct 2026 · fullhunt.io
Attack-path analysis
The API exposes external attack-path analysis for mapping lateral exposure and prioritizing remediation.Read 15 Oct 2026 · fullhunt.io
Change monitoring
Continuous monitoring detects new services, configuration drift, new URLs, visual changes and exposure changes, then routes alerts to configured destinations.Read 15 Oct 2026 · fullhunt.io
Cloud coverage
Cloud asset discovery covers AWS, Azure, GCP, Alibaba Cloud and Oracle Cloud without requiring cloud credentials.Read 15 Oct 2026 · fullhunt.io
Company profile
Gartner lists FullHunt as founded in 2018, headquartered in Dubai, United Arab Emirates, with 2–10 employees.Read 15 Oct 2026 · gartner.com
Dark web
Enterprise workflows include monitoring compromised credentials, infostealer activity, typosquatting, and phishing infrastructure tied to monitored organizations.Read 4 Oct 2026 · fullhunt.io
Dark-web intelligence
Enterprise features monitor compromised credentials, infostealer data, typosquatting, phishing infrastructure and brand impersonation.Read 15 Oct 2026 · fullhunt.io
Data coverage
The maker reports more than 2 billion indexed internet hosts, over 800 million CVE-to-host mappings, and an average data freshness cycle of 24 hours.Read 4 Oct 2026 · fullhunt.io
Data scale
FullHunt reports more than 2 billion indexed internet hosts, over 800 million CVE-to-host mappings and an average 24-hour freshness cycle.Read 15 Oct 2026 · fullhunt.io
Developer access
FullHunt offers REST APIs, a Python SDK, and MCP tools, with API plans using one credit per request and monthly credit resets.Read 4 Oct 2026 · fullhunt.io
Exposure monitoring
Continuous monitoring tracks new assets, service and certificate changes, configuration drift, and exposure alerts.Read 4 Oct 2026 · fullhunt.io
Independent Go integration
ProjectDiscovery's Subfinder includes a FullHunt source package documented on pkg.go.dev under an MIT licence.Read 15 Oct 2026 · pkg.go.dev
Independent Python library
PyPI hosts a fullhunt-api package requiring an API key, exposing methods for domains, subdomains, hosts, intelligence, ASN, DNS and search operations.Read 15 Oct 2026 · pypi.org
Independent tool integration
The Findomain open-source project lists FullHunt among its supported API sources for domain reconnaissance.Read 15 Oct 2026 · github.com
Legal entity
The terms identify the contracting company as FullHunt FZCO, registered in the Dubai Multi Commodities Centre.Read 15 Oct 2026 · fullhunt.io
Licence
The service terms state that FullHunt owns the platform, scanning methods, algorithms and aggregated intelligence, granting users a limited internal-use licence unless a commercial or OEM agreement applies.Read 15 Oct 2026 · fullhunt.io
Limit: data certainty
FullHunt's methodology page says observations and enrichment can contain uncertainty and recommends using timestamps, source fields and validation status when automating decisions.Read 15 Oct 2026 · fullhunt.io
Limit: reporting and integrations
The Gartner review title identifies reporting and integration limitations, alongside concerns about scalability and cost.Read 15 Oct 2026 · gartner.com
Limit: service warranty
The terms disclaim guarantees of complete vulnerability detection, uninterrupted operation or error-free service.Read 15 Oct 2026 · fullhunt.io
MCP coverage
The changelog says 63 MCP tools cover the API surface and agents authenticate with a standard Authorization header.Read 15 Oct 2026 · fullhunt.io
MSSP operation
MSSP workspaces provide per-client scoping, tenant data isolation, audit trails, client-ready reports and centralized operations.Read 15 Oct 2026 · fullhunt.io
Notable news
The Q4 2025 changelog records the launch of FullHunt Vulnerability Intelligence and MCP support for supported AI clients.Read 15 Oct 2026 · fullhunt.io
OEM terms
Free and Builder plans are for internal use, Scale allows commercial use, and OEM tiers include redistribution rights and dedicated endpoints.Read 4 Oct 2026 · fullhunt.io
Onboarding and deployment
Enterprise onboarding is advertised as under 30 minutes, with scanning performed externally and no customer infrastructure installation required.Read 15 Oct 2026 · fullhunt.io
Open-source work
FullHunt publishes open-source security tools such as log4j-scan, spring4shell-scan and struts-pwn, while the hosted FullHunt service remains proprietary.Read 15 Oct 2026 · fullhunt.io
Praise: asset visibility
The Gartner reviewer praised FullHunt for revealing unknown and unmanaged external assets and for continuous monitoring with clear dashboards.Read 15 Oct 2026 · gartner.com
Python library licence
The PyPI fullhunt-api package is marked MIT licensed and requires Python 3.8 or newer.Read 15 Oct 2026 · pypi.org
Rating on Gartner Peer Insights
3.0 out of 5 from 1 reviewRead 15 Oct 2026 · gartner.com
Security and privacy
FullHunt says it encrypts personal data in transit and at rest, uses access controls, and responds to GDPR requests within the applicable legal timeframe.Read 4 Oct 2026 · fullhunt.io
Security controls
FullHunt says it encrypts personal data in transit and at rest, uses access controls and handles applicable GDPR requests.Read 15 Oct 2026 · fullhunt.io
Usage condition
Users must have explicit lawful authority to monitor and scan assets submitted to FullHunt and agree to use the service for defensive or other legitimate cybersecurity purposes.Read 4 Oct 2026 · fullhunt.io
Vulnerability intelligence
FullHunt maps CVEs to observed assets and enriches them with exploit context, EPSS scores, and CISA KEV status.Read 4 Oct 2026 · fullhunt.io
Vulnerability validation
Enterprise scanning uses runtime-validated checks and correlates findings with exploit intelligence, EPSS and CISA KEV context.Read 15 Oct 2026 · fullhunt.io

Plans and prices

Free Free $0 to start 10 credits/month · attack-surface discovery · host/domain enrichment · exposure discovery · Organizations DB · IP search · vulnerability/exploit intelligence · basic filters · internal/evaluation only Read 15 Oct 2026 · fullhunt.io
Builder $149 a month $149/Month, billed monthly 500 credits/month · on-demand scanning · exposure monitoring/change alerts · attack-path API · advanced filters · EPSS/KEV enrichment · MCP/agentic AI · internal use only Read 15 Oct 2026 · fullhunt.io
Scale $1,499 a month $1,499/Month, billed monthly 10,000 credits/month · active/passive vulnerability scanning · historical data · passive DNS · TOR/OSINT research · up to 80 company allowlists · commercial use Read 15 Oct 2026 · fullhunt.io
OEM Starter $5,500 a month $5,500/Month 30,000 credits/month · up to 100 company allowlists · all features · dedicated OEM APIs · redistribution rights · dedicated support and SLA Read 15 Oct 2026 · fullhunt.io
OEM Growth $9,600 a month $9,600/Month 60,000 credits/month · up to 200 company allowlists · all features · dedicated OEM APIs · redistribution rights · dedicated support and SLA Read 15 Oct 2026 · fullhunt.io
FullHunt Enterprise $19,000 a year Starting at $19,000 USD/year Quoted per organization · up to 400,000 monitored assets per deployment · 14-day trial for qualified organizations · asset-based pricing Read 15 Oct 2026 · fullhunt.io
OEM Enterprise Price not published $20K to $35K/Month Custom credits · unlimited company allowlists · all features · dedicated OEM APIs · full redistribution rights · dedicated support and SLA Read 15 Oct 2026 · fullhunt.io

Every FullHunt plan and price →

Strong points and limits

Strong points

  • Discovers domains, cloud services, ports, technologies, and certificates
  • Continuous monitoring tracks changes and exposure alerts
  • Maps CVEs to observed assets with exploit context
  • Offers REST APIs, a Python SDK, and MCP tools
  • Free plan includes 10 credits per month

Limits

  • Free plan is for evaluation and internal use only
  • Builder plan is internal use only, with no redistribution
  • Monitoring submitted assets requires lawful authority
  • 14-day trial is listed for qualified Enterprise organizations

Who it suits

FullHunt is aimed at security vendors and builders, enterprise security teams, and MSSPs working across client environments. It may suit teams that need asset discovery, continuous exposure monitoring, or API access to internet intelligence.

Verdict

FullHunt combines external asset discovery, ongoing exposure monitoring, and vulnerability intelligence with developer access and integrations. Check plan credit limits and usage rights against your deployment, especially if you need redistribution or commercial use.

Where Specifiction places it

Alternatives to FullHuntAll alternatives →