nowfound

Dev tools · alternatives · 2026

24 alternatives to ASM Scan: Attack Surface Monitoring

Know what the internet knows about you

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    External Cyber Risk Management tools

    Jan 2026 · slcyber.io · its alternatives →

  2. 2

    Protect your digital attack surface with Cytrusst ASM Tool

    2025 · cytrusst.com · its alternatives →

  3. 3

    Your digital assets exposed to the internet create threats.

    2021 · swordeye.io · its alternatives →

  4. 4

    Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.

    2020 · hostedscan.com · its alternatives →

  5. 5

    Open-source LLM tracing for agent visibility

    Mar 2026 · breadcrumb.sh · its alternatives →

  6. 6
    Detectify▲124

    Application security testing reimagined

    2014 · detectify.com · its alternatives →

  7. 7

    Dear HN community! Looking forward to hearing your feedback on ACE (assured confidential execution), technology that implements VM-based trusted execution environment (TEE) for embedded RISC-V systems with focus on a formally verified and auditable firmware. We target high-assurance systems that can benefit from compartmentalization and hardware-backed isolation. The key ingredient called security monitor (firmware) is implemented in Rust. The formal specification is defined as annotations directly in code and gets translated to Coq using RefinedRust automation. ACE design is now part of the…

    2025 · github.com · its alternatives →

  8. 8

    I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…

    2025 · github.com · its alternatives →

  9. 9

    Pentest and patch every deploy with AI

    Jun 2026 · bestdefense.io · its alternatives →

  10. 10

    Comprehensive web attack surface discovery & analysis

    2025 · threatscan.ai · its alternatives →

  11. 11
    Pingkat▲72

    Continuously monitor your website's public resources

    2023 · its alternatives →

  12. 12

    See your external attack surface the way adversaries do

    2025 · glasstrail.com · its alternatives →

  13. 13

    Free attack surface monitoring and risk management solution

    2021 · control.coalitioninc.com · its alternatives →

  14. 14

    Attack Surface Management

    2024 · strobes.co · its alternatives →

  15. 15
    Protego▲12

    Website security scanner

    2025 · its alternatives →

  16. 16

    We built FullHunt Agentic AI, an autonomous tool that maps an organization’s internet-facing assets and possible attack paths in seconds. It automatically discovers exposed assets, correlates CVEs (EPSS, CISA KEV, FullHunt data), and produces a prioritized action plan. Try a prompt like: "Discover the attack surface of acme.com and identify possible attack paths."

    2021 · fullhunt.io · its alternatives →

  17. 17

    Hi HN! We’re Ethan and Danny, the authors of Tangent (https://github.com/telophasehq/tangent), a Rust-based log pipeline where all normalization, enrichment, and detection logic runs as WASM plugins. We kept seeing the same problems in the OCSF (https://ocsf.io) community: 1) Schemas change constantly. Large companies have whole teams dedicated to keeping vendor→OCSF mappings up to date. 2) There’s no shared library of mappings, so everyone recreates the same work. 3) Writing mappers is tedious, repetitive work. 4) Most pipelines use proprietary DSLs that are…

    Nov 2025 · github.com · its alternatives →

  18. 18

    Find exposed assets before attackers find them

    Jun 2026 · externalsight.com · its alternatives →

  19. 19

    We scan the entire internet to show what is exposed.

    2018 · help.coalitioninc.com · its alternatives →

  20. 20

    See your attack surface before attackers do

    Sep 2026 · outsideguardian.eu · its alternatives →

  21. 21CF
  22. 22

    World's Largest Exploit Database

    2023 · exploit.observer · its alternatives →

  23. 23

    Automated Attack Surface Management & AI Threat Intelligence

    Sep 2026 · app.btpsec.com · its alternatives →

  24. 24

    Passive attack surface mapping with quantum-risk readiness

    Jul 2026 · cyberreflex.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →