Threat intelligence and attack surface management

What attackers can see from outside 4 companies

This software finds every website, server and app that a company exposes to the internet, including ones the company forgot. It also watches the dark web and social media for the company's leaked data and passwords, and for fake accounts and websites, and gets the fakes taken down.

CloudSEKCloudSEK, a Bengaluru company, sells two products. XVigil watches the dark web, code websites and social media for a company's leaked data, passwords and fake accounts. BeVigil finds security flaws in a company's mobile apps.

RiskProfilerRiskProfiler, from South Carolina with engineers in Delhi NCR, sells the same checks as one package, with a risk score, and extends them to the company's suppliers.

ZeroFoxZeroFox, the American company, has engineers in Bengaluru. Its product is the take-down as much as the detection: once it finds a fake account or a fake website, it gets it removed.

ForesietForesiet is a young Bengaluru company. Its product, Foresiet Xtreme, finds exposed systems and fake websites and accounts.

The tech, explainedExternal attack surface management (EASM)Digital risk protection Dark-web monitoring

Threats beyond the company 3 companies

Some threats start outside the company: an attack on a supplier, a threat against an executive, or a protest outside an office. These companies watch for them.

AccreteAccrete, from New York with engineers in Mumbai, makes Argus, which collects threat information from public sources and tracks stories and threats spreading on social media.

OnticOntic watches for threats against executives, offices and events, for companies' security teams. It has teams in Pune and Delhi NCR.Delhi NCRSee alsoPhysical security, surveillance and trust and safety

SecureOSSecureOS sells the questionnaires and evidence that a company uses to check the security of its suppliers.See alsoGovernance, risk and compliance (GRC)

The tech, explainedThird-party risk management (TPRM)Threat intelligence platform↗ Security operations centre (SOC)Protective intelligence↗ Smart buildings

How it all worksVulnerability and exposure managementThe company as an attacker maps it.

See how it works →

What's changing

Suppliers are the new way in.

Attackers increasingly break into a company through one of its suppliers: a software vendor, an IT contractor or a payroll provider. So companies now scan their suppliers from the outside too, and score them, before and after they sign a contract.

← Previous in CybersecurityVulnerability management and penetration testing Next in Cybersecurity →AI security

Elsewhere in Cybersecurity:Email security and anti-phishing Identity and access management (IAM)KYC, identity verification and fraud prevention Endpoint security and device management Network security, firewalls and SASE Cloud and SaaS security Application and API security Data security and privacy SIEM and security operations (SOC)Managed security services (MDR and MSSP)Governance, risk and compliance (GRC)Physical security, surveillance and trust and safety

Companies: ingrid's company map. Hiring signals: postings feed of 5 Nov 2026.