Check Point External Risk Management vs CTM360

Check Point External Risk Management is a cloud-based service for discovering and reducing risks across an organization’s internet-facing assets. It identifies assets associated with brands, cloud environments, and suppliers, then analyzes vulnerabilities and misconfigurations, correlates them with threat intelligence, and scores and prioritizes risks. Continuous monitoring and recurring assessments aim to reveal new weaknesses and limit how long they remain exposed. Teams receive prioritized recommendations and a practical remediation and hardening roadmap, alongside a compliance and regulatory alignment review. Coverage combines threat intelligence, deep and dark web monitoring, external attack surface management, digital risk protection, and supply-chain intelligence. Check Point experts can provide investigations, threat reports, phishing-site and social-profile takedowns, red-team exercises, and attack simulations. The agentless SaaS service offers Essential and Advanced packages: Essential has one regular user, one integration, weekly scans, and 20 remediation coins; Advanced has three regular users, two integrations, daily scans, and 100 coins. Microsoft Sentinel integration can synchronize alerts and trigger SOAR playbooks. Pricing is on request.

CTM360 is a cybersecurity platform for discovering vulnerabilities and managing threats across the surface, deep, and dark web. Its HackerView service finds digital assets, identifies issues, and passively maps an organization’s public digital presence. Security ratings cover 11 risk categories and more than 90 issues, with an A–F grade for each category. Other listed capabilities include phishing and brand protection, social media fraud monitoring, executive impersonation monitoring, and managed takedowns. ThreatCover provides curated threat feeds prioritized and mapped to the MITRE ATT&CK framework. RiskHub supports third-party security assessments using questionnaires, external monitoring, and internal security controls. CTM360 is available on the web and through an API, and describes setup as requiring no installation or configuration. It says its support is available 24 hours a day, 365 days a year. The Community Edition is free, limited to one authorized user per organization, and includes three free takedowns. Paid plans start at $5,000/yr+. Base-price managed services cover one brand and one primary domain with its subdomains; additional brands or primary domains incur extra charges.