AttackIQ Platform vs Group-IB Attack Surface Management
AttackIQ Platform
attackiq.comGroup-IB Attack Surface Management
group-ib.comSide by side
| Figure | AttackIQ Platform | Group-IB Attack Surface Management |
|---|---|---|
| Price from | $4,995/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 9 | 2 |
| Spec score · Attack Surface Management Software | 9.4 (#1) | 7.6 (#16) |
| Founded | LinkedIn and Crunchbase list AttackIQ as founded in 2013. | 2003 |
| Headquarters | AttackIQ lists its headquarters at 171 Main Street, Suite 656, Los Altos, California 94022. | Singapore |
| Integrations | Published integration materials name Microsoft 365, Palo Alto Panorama, ServiceNow, Splunk, Elastic, IBM QRadar, LogRhythm, Azure Sentinel, Okta, Qualys, Tenable and AWS-related services. | ASM offers a REST API for connecting SIEM, ticketing, and other security operations tools, native AWS and Azure cloud integrations, plus Postman collections and a Python library. |
| Intended users | AttackIQ says it serves Fortune 500 enterprises, federal agencies, and MSSPs. | The product page describes use by enterprises seeking external attack surface visibility and gives examples of security teams using it to monitor assets, vulnerabilities, and threats. |
| Purpose | AttackIQ describes its platform as a CTEM platform for modeling adversary behavior, prioritizing attack paths, validating controls, and measuring security improvement. | The platform maps external assets, monitors the attack surface continuously, and enriches findings with threat intelligence to assess risk and prioritize issues. |
| Security certification | The UK government service listing states that AttackIQ holds SOC 2 certification. | Group-IB’s certificates page lists its management system as certified to ISO 27001:2022 and ISO 9001:2015. |
| Threat intelligence | The Watchtower module identifies adversaries likely to target an organization and turns that intelligence into testable scenarios. | Confirmed assets are checked against threat intelligence that includes credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity. |
Plans
AttackIQ Platform
- Flex FreeFree
- FreeFree
- Flex Pay-as-you-go$300, paid once
- Pay-as-you-go$300, paid once
- Flex Monthly$4,995 a month
- Monthly$4,995 a month
- AttackIQ EnterprisePriced on request
- Flex YearlyPrice not published
- YearlyPriced on request
Group-IB Attack Surface Management
- 3rd Party RiskPriced on request
- StandardPriced on request
In their own words
AttackIQ Platform
AttackIQ Platform has no write-up on Specifiction yet; its figures are above.
Group-IB Attack Surface Management
Group-IB Attack Surface Management is a cloud platform for identifying internet-facing assets and monitoring them continuously. Entering an organization’s domain starts infrastructure discovery through relationships such as subdomains, SSL certificates, and DNS records. Users can confirm or ignore discovered assets to maintain an external inventory, then track issues on confirmed assets using statuses including Under Review, Solved, Ignored, and False Positive, or create remediation tickets. Threat intelligence adds context from credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity. The Standard License lists automated discovery, validation, risk assessment, prioritization, ticketing, visual mapping, and graph research. The 3rd Party Risk plan adds customized discovery and cyber risk scoring for third parties. A 21-day trial covers up to five domains and unlimited assets, with reports and API data export, but scans common ports only. Pricing is on request and based on confirmed external assets. The product offers a REST API, native AWS and Azure integrations, Postman collections, and a Python library.