CTM360 vs Group-IB Attack Surface Management

CTM360 is a cybersecurity platform for discovering vulnerabilities and managing threats across the surface, deep, and dark web. Its HackerView service finds digital assets, identifies issues, and passively maps an organization’s public digital presence. Security ratings cover 11 risk categories and more than 90 issues, with an A–F grade for each category. Other listed capabilities include phishing and brand protection, social media fraud monitoring, executive impersonation monitoring, and managed takedowns. ThreatCover provides curated threat feeds prioritized and mapped to the MITRE ATT&CK framework. RiskHub supports third-party security assessments using questionnaires, external monitoring, and internal security controls. CTM360 is available on the web and through an API, and describes setup as requiring no installation or configuration. It says its support is available 24 hours a day, 365 days a year. The Community Edition is free, limited to one authorized user per organization, and includes three free takedowns. Paid plans start at $5,000/yr+. Base-price managed services cover one brand and one primary domain with its subdomains; additional brands or primary domains incur extra charges.

Group-IB Attack Surface Management is a cloud platform for identifying internet-facing assets and monitoring them continuously. Entering an organization’s domain starts infrastructure discovery through relationships such as subdomains, SSL certificates, and DNS records. Users can confirm or ignore discovered assets to maintain an external inventory, then track issues on confirmed assets using statuses including Under Review, Solved, Ignored, and False Positive, or create remediation tickets. Threat intelligence adds context from credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity. The Standard License lists automated discovery, validation, risk assessment, prioritization, ticketing, visual mapping, and graph research. The 3rd Party Risk plan adds customized discovery and cyber risk scoring for third parties. A 21-day trial covers up to five domains and unlimited assets, with reports and API data export, but scans common ports only. Pricing is on request and based on confirmed external assets. The product offers a REST API, native AWS and Azure integrations, Postman collections, and a Python library.