FullHunt

FullHunt is an API-first internet intelligence service for finding exposed assets, tracking changes, and adding vulnerability context. It fits security vendors, enterprise teams, and MSSPs managing several organizations; smaller teams should examine the credit ceilings and internal-use restrictions before committing.

Overview

FullHunt discovers domains, subdomains, IP addresses, cloud services, ports, technologies, and certificates, then maintains a continuously monitored view of the external attack surface. Monitoring flags newly seen assets, service and certificate changes, configuration drift, and exposure alerts. Attack-path analysis and cloud discovery broaden its usefulness beyond a basic domain inventory.

Its vulnerability layer maps CVEs to observed assets and adds exploit context, EPSS scores, and CISA KEV status. The maker reports more than 2 billion indexed internet hosts, over 800 million CVE-to-host mappings, and an average 24-hour data-freshness cycle. Those figures suggest broad coverage, while the freshness figure is an average rather than a promise that every observation updates on that schedule. Use is limited to assets you are explicitly authorized to monitor and scan for defensive or other legitimate cybersecurity purposes.

Key features

Discovery and exposure tracking

Continuous monitoring is valuable for teams that need change detection rather than periodic inventories. Service and certificate changes, drift, and exposure alerts can feed remediation workflows, while active and passive scanning on higher plans adds deeper assessment.

Vulnerability and dark-web intelligence

CVE-to-asset mapping with exploitability signals helps prioritize findings. Enterprise workflows also cover compromised credentials, infostealer activity, typosquatting, and phishing infrastructure tied to monitored organizations, making the upper tiers more suitable for coordinated risk operations than the entry plans.

APIs and integrations

REST APIs, a Python SDK, and MCP tools support product integration and automation. Splunk, Sumo Logic, Cortex XSOAR, FortiSOAR, Mindflow, Jira, ServiceNow, Slack, Microsoft Teams, and custom webhooks are listed integrations. API usage consumes one credit per request, with monthly resets, so high-volume automations need careful budgeting.

Pricing

FullHunt is freemium, with a 14-day trial and paid plans from $149 a month.

Free and Builder are internal-use tiers. Commercial redistribution starts with Scale, while OEM plans add dedicated endpoints and explicit redistribution rights. Around-the-clock support is stated for the service, with a dedicated 24/7 team for Enterprise deployments.

Platforms

FullHunt is delivered through web access and APIs, with REST, Python SDK, and MCP options for developers and security products.

Who it's for

Choose it when you need one service for external and cloud asset discovery, continuous monitoring, vulnerability prioritization, and API-fed workflows across client environments. MSSPs and security vendors should focus on Scale or an OEM tier because Builder prohibits redistribution. A small internal team with occasional scans may find the 10-credit Free plan useful for evaluation, but recurring operations will quickly require Builder or Scale.

Pros and cons

• Pros: Broad discovery across domains, cloud assets, services, technologies, and certificates; continuous change and exposure monitoring; CVE context enriched with EPSS and CISA KEV status; REST, SDK, MCP, and numerous workflow integrations; dedicated OEM options for redistribution.
• Cons: The Free tier allows only 10 credits per month; Builder remains internal-use only; API requests consume credits, making volume predictable but potentially expensive; advanced scanning, historical DNS, dark-web workflows, and larger allowlists sit in substantially higher-priced tiers.

Alternatives

OWASP Amass is the better choice for a free, open-source framework that runs on Linux, macOS, Windows, or self-hosted infrastructure, rather than a managed intelligence service.

Qualys External Attack Surface Management suits readers wanting a 30-day no-cost CSAM/EASM period and API, Linux, or web access.

runZero is preferable when a free Community Edition covering 100 assets, one organization, recurring tasks, and 30 days of retention is sufficient.

AttackIQ Platform is aimed at adversary testing packages and research, with a free tier and $300.00 USD pay-as-you-go purchases.

CTM360 offers a free community option for one authorized user and a paid restricted EASM tier.

Detectify Surface Monitoring is an alternative for teams preferring annual pricing, with a free Starter platform and paid per-domain monitoring.

Bitdefender Total Security is a consumer-focused, multi-device security product rather than an external attack-surface platform.

Check Point External Risk Management is another enterprise exposure-management option with weekly scans and remediation credits in its Essential Package.

See the Attack Surface Management Software category for more options.

Verdict

FullHunt is a strong choice for security vendors, enterprise teams, and MSSPs that need API-driven discovery, continuous exposure monitoring, and vulnerability intelligence in one service. Its breadth, integrations, and OEM rights are the main reasons to choose it; the small free allowance, credit-based API economics, and steep jump to commercial and redistribution tiers are the main reasons to look elsewhere.