Group-IB Attack Surface Management

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Group-IB Attack Surface Management is ranked #10 of 31 in threat intelligence platforms on Inferse. It runs on API, Web. There is no free plan. A free trial is offered.

Compared on threat intelligence platforms

Free plan: Nogroup-ib.com
External asset discovery: Yesgroup-ib.com
Attack-path analysis: Yesgroup-ib.com
Cloud asset discovery: Yesgroup-ib.com
Monitoring frequency: continuousgroup-ib.com
API access: Yesgroup-ib.com

Facts

Purpose: The platform maps external assets, monitors the attack surface continuously, and enriches findings with threat intelligence to assess risk and prioritize issues.group-ib.com · 30 Sept 2026
Discovery: Entering an organization’s domain lets the system identify and map its infrastructure using asset relationships such as subdomains, SSL certificates, and DNS records.group-ib.com · 30 Sept 2026
Asset inventory: Users can confirm or ignore discovered internet-facing assets to maintain an up-to-date external asset inventory.group-ib.com · 30 Sept 2026
Issue workflow: Issues on confirmed assets can be marked Under Review, Solved, Ignored, or False Positive, and users can create tickets for remediation.group-ib.com · 30 Sept 2026
Threat intelligence: Confirmed assets are checked against threat intelligence that includes credential dumps, dark web discussions, malware deployment, phishing panels, initial access sales, command-and-control traffic, and botnet activity.group-ib.com · 30 Sept 2026
Plan distinction: The 3rd Party Risk plan adds customized asset discovery for third parties and third-party cyber risk scoring; active scanning is also listed in the feature matrix.group-ib.com · 30 Sept 2026
Trial limits: The 21-day trial covers up to five domains and unlimited assets, includes reports and API data export, and ends automatically when the period expires.group-ib.com · 30 Sept 2026
Trial scan scope: The trial covers common ports only; full port scans and active scanning capabilities are listed as options for paid licenses.group-ib.com · 30 Sept 2026
Deployment and collection: The product requires no agents, new instances, integrations, or major configurations for initial mapping, and the maker says discovery uses passive data collection.group-ib.com · 30 Sept 2026
Integrations: ASM offers a REST API for connecting SIEM, ticketing, and other security operations tools, native AWS and Azure cloud integrations, plus Postman collections and a Python library.group-ib.com · 30 Sept 2026
Support and onboarding: The plan matrix lists a service desk, onboarding training, unlimited API access, and unlimited users for the Standard License and 3rd Party Risk module.group-ib.com · 30 Sept 2026
Security certification: Group-IB’s certificates page lists its management system as certified to ISO 27001:2022 and ISO 9001:2015.group-ib.com · 30 Sept 2026
Intended users: The product page describes use by enterprises seeking external attack surface visibility and gives examples of security teams using it to monitor assets, vulnerabilities, and threats.group-ib.com · 30 Sept 2026