Line them up: compare ASM tools side by side

Recursive Connective Intelligence mapping with 13 discovery techniques reaches subsidiaries and third- and fourth-party suppliers.

Maps the external estate including subsidiaries, brands and acquired companies, with zero install.

Starts from the organization's name with no IP ranges or asset lists, covering subsidiaries, brands and business units.

Attributes each asset to the relevant subsidiary or business owner automatically; IONIX's claims about fewer false positives are its own.

Maps assets to subsidiaries, brands and M&A; the evidence behind each attribution is described only briefly.

Each finding carries a trace of how it was found and which subsidiary, brand or business unit it belongs to.

Non-intrusive exploit simulations, plus safe active testing of new CVEs in Live Exposure Defense; watchTowr, CyCognito and Hadrian document heavier attack-style testing.

Eight automated red-teaming agents, from web applications to credential stuffing and DNS, and Project Red reproduces emerging vulnerabilities to validate exposure.

Runs 100,000+ unauthenticated black-box tests across 30+ categories without state changes, and added Continuous AI Pentesting in June 2026.

Agentic mitigation "automatically invoke[s] compensating controls": WAF rules deployable through Akamai, Cloudflare and other WAFs within its 12-hour Live Exposure Defense SLA, plus Active Protection for dangling assets and DNS hijacking targets.

Active Defense pushes ready-to-use rules to existing WAFs, firewalls, IPS and IDS, naming Cloudflare, Akamai, Imperva, F5, Fortinet, Check Point and Citrix.

No compensating control or automated mitigation is described; exposures wait for the owner's fix.

Routes findings to Jira and ServiceNow, tracks each CVE from identified to resolved, and its homepage states "Instant re-validation of remediated items"; step-by-step fix guidance is described less fully than at CyCognito or Hadrian.

Creates work in eight named ticketing tools and re-tests the hour a threat emerges; a retest after your own fix is not described separately.

Step-by-step guidance, owner-linked workflows and a retest after each fix.

Names Jira, ServiceNow, Splunk, Microsoft Sentinel, Cortex XSOAR, Slack, Wiz and Prisma Cloud plus an API; a shorter list than the platform suites.

Eight ticketing and workflow connections and seven edge vendors; SIEM connections are not named on the pages reviewed.

Names ServiceNow, Jira, Splunk and Zendesk for remediation workflows; edge and SOAR connections are not named on the pages reviewed.

Lists three monthly plans on AWS Marketplace (Silver $25,000, Gold $35,000, Platinum $45,000 per month on a 1-month contract); no price on its own site and no free trial listed.

No pricing published.

Publishes its pricing basis and an AWS Marketplace price: $30,000 per 12 months for ASM covering up to 250 assets.