Skip to content
SPECIFICTION
Get listed

Group-IB Attack Surface Management

group-ib.com

Free trial WebAPI
Visit group-ib.com
Spec score 7.6 #16 of 33 in Attack Surface Management Software

What it is

Group-IB Attack Surface Management is a cloud platform for identifying internet-facing assets and monitoring them continuously. Entering an organization’s domain starts infrastructure discovery through relationships such as subdomains, SSL certificates, and DNS records. Users can confirm or ignore discovered assets to maintain an external inventory, then track issues on confirmed assets using statuses including Under Review, Solved, Ignored, and False Positive, or create remediation tickets. Threat intelligence adds context from credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity. The Standard License lists automated discovery, validation, risk assessment, prioritization, ticketing, visual mapping, and graph research. The 3rd Party Risk plan adds customized discovery and cyber risk scoring for third parties. A 21-day trial covers up to five domains and unlimited assets, with reports and API data export, but scans common ports only. Pricing is on request and based on confirmed external assets. The product offers a REST API, native AWS and Azure integrations, Postman collections, and a Python library.

Spec sheet

Purpose
The platform maps external assets, monitors the attack surface continuously, and enriches findings with threat intelligence to assess risk and prioritize issues.Read 30 Sep 2026 · group-ib.com
Intended users
The product page describes use by enterprises seeking external attack surface visibility and gives examples of security teams using it to monitor assets, vulnerabilities, and threats.Read 30 Sep 2026 · group-ib.com
Integrations
ASM offers a REST API for connecting SIEM, ticketing, and other security operations tools, native AWS and Azure cloud integrations, plus Postman collections and a Python library.Read 30 Sep 2026 · group-ib.com
Headquarters
SingaporeRead 28 Sep 2026 · group-ib.com
Founded
2003Read 28 Sep 2026 · group-ib.com
Asset inventory
Users can confirm or ignore discovered internet-facing assets to maintain an up-to-date external asset inventory.Read 30 Sep 2026 · group-ib.com
Deployment and collection
The product requires no agents, new instances, integrations, or major configurations for initial mapping, and the maker says discovery uses passive data collection.Read 30 Sep 2026 · group-ib.com
Discovery
Entering an organization’s domain lets the system identify and map its infrastructure using asset relationships such as subdomains, SSL certificates, and DNS records.Read 30 Sep 2026 · group-ib.com
Issue workflow
Issues on confirmed assets can be marked Under Review, Solved, Ignored, or False Positive, and users can create tickets for remediation.Read 30 Sep 2026 · group-ib.com
Plan distinction
The 3rd Party Risk plan adds customized asset discovery for third parties and third-party cyber risk scoring; active scanning is also listed in the feature matrix.Read 30 Sep 2026 · group-ib.com
Plan features
The feature matrix lists continuous automated external asset discovery, validation and risk assessment, issue prioritization and ticketing, threat intelligence insights, visual mapping, and a graph research tool for the Standard License.Read 30 Sep 2026 · group-ib.com
Security certification
Group-IB’s certificates page lists its management system as certified to ISO 27001:2022 and ISO 9001:2015.Read 30 Sep 2026 · group-ib.com
Support and onboarding
The plan matrix lists a service desk, onboarding training, unlimited API access, and unlimited users for the Standard License and 3rd Party Risk module.Read 30 Sep 2026 · group-ib.com
Threat intelligence
Confirmed assets are checked against threat intelligence that includes credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity.Read 30 Sep 2026 · group-ib.com
Trial limits
The 21-day trial covers up to five domains and unlimited assets, includes reports and API data export, and ends automatically when the period expires.Read 30 Sep 2026 · group-ib.com
Trial scan scope
The trial covers common ports only; full port scans and active scanning capabilities are listed as options for paid licenses.Read 30 Sep 2026 · group-ib.com

Plans and prices

3rd Party Risk Priced on request Pricing based on total number of confirmed external assets Read 30 Sep 2026 · group-ib.com
Standard Priced on request Pricing based on total number of confirmed external assets Read 30 Sep 2026 · group-ib.com

Every Group-IB Attack Surface Management plan and price →

Strong points and limits

Strong points

  • Continuous external asset discovery and monitoring.
  • Threat intelligence enriches confirmed asset findings.
  • Trial covers up to five domains and unlimited assets.
  • REST API and native AWS and Azure integrations.

Limits

  • Trial scans common ports only.
  • Pricing is available on request.
  • No free plan is listed.

Who it suits

It suits enterprise security teams seeking visibility into external assets, vulnerabilities, and threats. The 3rd Party Risk plan is for organizations assessing third-party cyber risk.

Verdict

Group-IB ASM combines external asset inventory, issue workflows, and threat intelligence. The trial is limited to common-port scans, while broader scan capabilities are listed for paid licenses.

Where Specifiction places it

Alternatives to Group-IB Attack Surface ManagementAll alternatives →