Censys Attack Surface Management vs RiskRecon
Censys Attack Surface Management
censys.comRiskRecon
riskrecon.comSide by side
| Figure | Censys Attack Surface Management | RiskRecon |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| API | — | Yes |
| Plans published | 1 | 4 |
| Spec score · Security Ratings Software | 7.4 (#16) | 8.2 (#6) |
| Asset discovery | First-party scanning discovers exposed assets including services on nonstandard ports, hosts with self-signed certificates, and hosts in residential networks. | Its asset discovery uses analyst-assisted machine-learning models tailored to each monitored company to attribute assets as they change over time. |
| Company history | Censys Inc. was founded in 2017, and Censys ASM launched in 2020. | RiskRecon says it was founded by Kelly White and officially incorporated in October 2015. |
| Headquarters | Censys identifies Ann Arbor, Michigan as its headquarters. | RiskRecon says it is headquartered in Salt Lake City, Utah, with a presence in Boston, Massachusetts. |
| Integrations | Listed ASM integrations include AWS, Azure, Google Cloud, Microsoft Sentinel, ServiceNow, Slack, Jira, Tenable, Qualys, and Swimlane. | RiskRecon lists integrations with RSA Archer, Sigma Ratings, Whistic, ServiceNow and other GRC or workflow platforms. |
| Purpose | ASM continuously measures an organization’s external attack surface from the outside in. | RiskRecon provides cybersecurity ratings and insights to help organizations understand and act on cyber risk. |
Plans
Censys Attack Surface Management
- Censys Attack Surface ManagementPriced on request
RiskRecon
- 30-day free trialFree
- Free 30-day portal accessFree
- Paid subscriptionPriced on request
- RiskRecon subscriptionsPriced on request
In their own words
Censys Attack Surface Management
Censys Attack Surface Management has no write-up on Specifiction yet; its figures are above.
RiskRecon
RiskRecon provides cybersecurity ratings and insights to help organizations assess and act on cyber risk across their vendor ecosystems. It continuously monitors vendors and offers real-time visibility into third-party exposure. Its asset discovery uses analyst-assisted machine-learning models tailored to each monitored company to attribute assets as they change. Findings are prioritized by issue severity and estimated asset value, with estimates based on factors such as authentication, transaction capabilities, and collected data types. The platform can create risk-prioritized vendor action plans; vendors can track remediation in its portal at no cost and without time limits. RiskRecon Assessments Powered by Whistic uses AI to help answer questionnaires, summarize documentation, and check compliance across a vendor catalog. Ratings cover externally visible systems, not direct inspection of internal systems. It offers API and web access, continuous score refresh, change alerts, and full attack-surface coverage. Pricing is on request, and a 30-day trial includes a quick-start guide and access to the Solutions Consulting team. A free plan is not available, though the trial includes portal access for up to 50 vendors.