Censys Attack Surface Management vs Detectify Surface Monitoring
Censys Attack Surface Management
censys.com
Detectify Surface Monitoring
detectify.comSide by side
| Figure | Censys Attack Surface Management | Detectify Surface Monitoring |
|---|---|---|
| Price from | — | €208.33/mo |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| API | — | Yes |
| Plans published | 1 | 5 |
| Spec score · Security Ratings Software | 7.4 (#16) | 8.2 (#5) |
| Spec score · Attack Surface Management Software | 7.3 (#22) | 8.1 (#8) |
| Asset discovery | First-party scanning discovers exposed assets including services on nonstandard ports, hosts with self-signed certificates, and hosts in residential networks. | Surface Monitoring discovers domains, subdomains, IP addresses, IP ranges, open ports, and running technologies. |
| Founded | 2017 | 2013 |
| Headquarters | Censys identifies Ann Arbor, Michigan as its headquarters. | Stockholm, Sweden |
| Integrations | Listed ASM integrations include AWS, Azure, Google Cloud, Microsoft Sentinel, ServiceNow, Slack, Jira, Tenable, Qualys, and Swimlane. | Detectify lists integrations including Jira, Slack, Microsoft Teams, PagerDuty, OpsGenie, ServiceNow, Splunk, webhooks, GitLab, and GitHub Actions. |
| Prioritization | The product’s exposure monitoring includes EPSS, KEV, and other vulnerability risk scoring mechanisms. | Findings can be filtered and tagged, and include remediation tips. |
| Purpose | ASM continuously measures an organization’s external attack surface from the outside in. | Surface Monitoring continuously monitors internet-facing subdomains for exposed files, vulnerabilities, and misconfigurations. |
Plans
Censys Attack Surface Management
- Censys Attack Surface ManagementPriced on request
Detectify Surface Monitoring
- StarterFree
- StarterFree
- Standard€2,500 a year
- Professional€5,000 a year
- Enterprise€15,000 a year
In their own words
Censys Attack Surface Management
Censys Attack Surface Management has no write-up on Specifiction yet; its figures are above.
Detectify Surface Monitoring
Detectify Surface Monitoring continuously monitors internet-facing subdomains for exposed files, vulnerabilities, and misconfigurations. It discovers domains, subdomains, IP addresses and ranges, open ports, and running technologies; cloud connectors for AWS, Azure, Cloudflare, and GCP can help locate assets across an external attack surface. Thousands of security tests cover issues such as misconfigurations, XSS, SSRF, and RCE. Teams can define custom rules for particular changes, then filter and tag findings that include remediation tips. The cloud service supports API access, authenticated and browser-based scanning, API testing, and CI/CD integration. Integrations include Jira, Slack, Microsoft Teams, PagerDuty, OpsGenie, ServiceNow, Splunk, webhooks, GitLab, and GitHub Actions. Detectify says research from a community of more than 400 ethical hackers informs the product, with some findings reaching implementation in as little as 15 minutes. Plans list annual platform fees from free for Starter to €15,000 a year for Enterprise; monitoring costs extra per domain on every plan. A 14-day trial is listed.