Freedom251 › Attack Surface Management Software
Group-IB Attack Surface Management
Visit Group-IB Attack Surface Management Alternatives Pricing
What Group-IB Attack Surface Management is
Group-IB Attack Surface Management maps an organization’s internet-facing assets, monitors them continuously, and adds threat intelligence to help assess risk and prioritize issues. Entering a domain starts infrastructure discovery through relationships such as subdomains, SSL certificates, and DNS records. Users can confirm or ignore discovered assets to maintain an external inventory, then manage issues on confirmed assets with statuses including Under Review, Solved, Ignored, and False Positive. Remediation tickets can also be created.
Threat intelligence checks confirmed assets for signals such as credential dumps, dark web discussions, phishing panels, malware deployment, initial access sales, command-and-control traffic, and botnet activity. The Standard License lists automated discovery, validation, risk assessment, prioritization, ticketing, visual mapping, and graph research. The 3rd Party Risk plan adds customized third-party discovery and cyber risk scoring. A 21-day trial covers up to five domains and unlimited assets, with reports and API export, but scans common ports only. Pricing is on request, based on confirmed external asset counts.
Who it suits
The product is aimed at enterprises seeking visibility into external attack surfaces. Security teams can use it to monitor internet-facing assets, vulnerabilities, and threats.
What it does well
- Continuously discovers and maps external assets.
- Threat intelligence enriches findings with multiple threat signals.
- Users can track issues and create remediation tickets.
- Trial includes reports and API data export.
- REST API and native AWS and Azure integrations are listed.
What to know first
- No free plan is listed.
- The 21-day trial is limited to common-port scans.
- Full port and active scanning are listed for paid licenses.
- Pricing is available on request.
Limits
The 21-day trial covers up to five domains and unlimited assets, includes reports and API data export, and ends automatically when the period expires. Trial scans cover common ports only; full-port scans and active scanning are listed as paid-license options.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Standard | Pricing based on total number of confirmed external assets | On request |
| 3rd Party Risk | Pricing based on total number of confirmed external assets | On request |
As group-ib.com lists them, read 30 Sept 2026. The maker's own page has the final word.
Getting started
- Visit the Group-IB Attack Surface Management website.
- Start the 21-day trial for up to five domains and unlimited assets.
- Enter an organization’s domain to begin passive asset discovery.
- Confirm or ignore discovered assets to maintain the inventory.
- Review issues on confirmed assets and create remediation tickets as needed.
- Connect security operations tools through the REST API, or use native AWS and Azure integrations.
Verdict
Group-IB Attack Surface Management combines external asset discovery, continuous monitoring, and threat intelligence with issue workflows. The trial covers up to five domains, but scanning is limited to common ports.
Questions
Is there a free plan?
No. Group-IB lists a 21-day free trial instead.
How long is the trial and what does it cover?
The trial lasts 21 days and covers up to five domains and unlimited assets. It includes reports and API data export, and ends automatically when the period expires.
Which platforms does it support?
The product is available through web and API, and is deployed in the cloud.
How are the plans priced?
Pricing is on request for both Standard and 3rd Party Risk, based on the total number of confirmed external assets.
What does the 3rd Party Risk plan add?
It adds customized asset discovery for third parties and third-party cyber risk scoring.
Does the trial include full-port or active scanning?
No. The trial covers common ports only. Full-port scans and active scanning are listed as options for paid licenses.
Facts from Group-IB Attack Surface Management's own pages
- Asset inventory
- Users can confirm or ignore discovered internet-facing assets to maintain an up-to-date external asset inventory. · group-ib.com, 30 Sept 2026
- Deployment and collection
- The product requires no agents, new instances, integrations, or major configurations for initial mapping, and the maker says discovery uses passive data collection. · group-ib.com, 30 Sept 2026
- Discovery
- Entering an organization’s domain lets the system identify and map its infrastructure using asset relationships such as subdomains, SSL certificates, and DNS records. · group-ib.com, 30 Sept 2026
- Founded
- 2003 · group-ib.com, 28 Sept 2026
- Headquarters
- Singapore · group-ib.com, 28 Sept 2026
- Integrations
- ASM offers a REST API for connecting SIEM, ticketing, and other security operations tools, native AWS and Azure cloud integrations, plus Postman collections and a Python library. · group-ib.com, 30 Sept 2026
- Intended users
- The product page describes use by enterprises seeking external attack surface visibility and gives examples of security teams using it to monitor assets, vulnerabilities, and threats. · group-ib.com, 30 Sept 2026
- Issue workflow
- Issues on confirmed assets can be marked Under Review, Solved, Ignored, or False Positive, and users can create tickets for remediation. · group-ib.com, 30 Sept 2026
- Plan distinction
- The 3rd Party Risk plan adds customized asset discovery for third parties and third-party cyber risk scoring; active scanning is also listed in the feature matrix. · group-ib.com, 30 Sept 2026
- Plan features
- The feature matrix lists continuous automated external asset discovery, validation and risk assessment, issue prioritization and ticketing, threat intelligence insights, visual mapping, and a graph research tool for the Standard License. · group-ib.com, 30 Sept 2026
- Purpose
- The platform maps external assets, monitors the attack surface continuously, and enriches findings with threat intelligence to assess risk and prioritize issues. · group-ib.com, 30 Sept 2026
- Security certification
- Group-IB’s certificates page lists its management system as certified to ISO 27001:2022 and ISO 9001:2015. · group-ib.com, 30 Sept 2026
- Support and onboarding
- The plan matrix lists a service desk, onboarding training, unlimited API access, and unlimited users for the Standard License and 3rd Party Risk module. · group-ib.com, 30 Sept 2026
- Threat intelligence
- Confirmed assets are checked against threat intelligence that includes credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity. · group-ib.com, 30 Sept 2026
- Trial limits
- The 21-day trial covers up to five domains and unlimited assets, includes reports and API data export, and ends automatically when the period expires. · group-ib.com, 30 Sept 2026
- Trial scan scope
- The trial covers common ports only; full port scans and active scanning capabilities are listed as options for paid licenses. · group-ib.com, 30 Sept 2026
Where Group-IB Attack Surface Management stands on Freedom251
- Attack Surface Management Software#16 of 33