Average Ratings 0 Ratings
Average Ratings 4 Ratings
Similar Products
-
SOCRadar Extended Threat IntelligenceSOCRadar Extended Threat Intelligence is a holistic platform designed from the ground up to proactively detect and assess cyber threats, providing actionable insights with contextual relevance. Organizations increasingly require enhanced visibility into their publicly accessible assets and the vulnerabilities associated with them. Relying solely on External Attack Surface Management (EASM) solutions is inadequate for mitigating cyber risks; instead, these technologies should form part of a comprehensive enterprise vulnerability management framework. Companies are actively pursuing protection for their digital assets in every potential exposure area. The conventional focus on social media and the dark web no longer suffices, as threat actors continuously expand their methods of attack. Therefore, effective monitoring across diverse environments, including cloud storage and the dark web, is essential for empowering security teams. Additionally, for a thorough approach to Digital Risk Protection, it is crucial to incorporate services such as site takedown and automated remediation. This multifaceted strategy ensures that organizations remain resilient against the evolving landscape of cyber threats.
-
ReflectizReflectiz is a web exposure management platform that enables organizations to proactively identify, monitor, and mitigate security, privacy, and compliance risks across their digital environments. It provides comprehensive visibility and control over first, third, and even fourth-party components like scripts, trackers, and open-source libraries—elements that are often missed by traditional security tools. The unique advantage of Reflectiz is that it operates remotely, without embedding code on customer websites. This ensures no impact on site performance, no access to sensitive user data, and no additional attack surface. By continuously monitoring all publicly available components, Reflectiz identifies hidden risks in your digital supply chain, helping to detect vulnerabilities and compliance issues in real-time. With a centralized dashboard, Reflectiz gives businesses a holistic view of their web assets, making it easier to manage risk across all digital properties. The platform allows teams to establish baselines for approved behaviors, swiftly identifying deviations that may indicate threats. Reflectiz is particularly valuable for industries such as eCommerce, healthcare, and finance, where managing third-party risks is crucial. It helps businesses enhance security, reduce attack surfaces, and maintain compliance without requiring any changes to website code, offering continuous monitoring and detailed insights into external component behaviors.
-
Predict360Predict360, by 360factors, is a risk and compliance management and intelligence platform that automates workflows and enhances reporting for banks, credit unions, financial services organizations, and insurance companies. The SaaS platform integrates regulations and obligations, compliance management, risks, controls, KRIs, audits and assessments, policies and procedures, and training in a single cloud-based SaaS platform and delivers robust analytics and insights that empower customers to predict risks and streamline compliance. Happy with your current GRC but lacking a true analytics and BI tool for intuitive executive and Board reports? Ask about Lumify360 from 360factors - a predictive analytics platform that can work alongside any GRC. Keep your process management workflows intact while providing stakeholders with the timely reports and dashboards they need.
-
Criminal IPCriminal IP is a cyber threat intelligence search engine that detects vulnerabilities in personal and corporate cyber assets in real time and allows users to take preemptive actions. Coming from the idea that individuals and businesses would be able to boost their cyber security by obtaining information about accessing IP addresses in advance, Criminal IP's extensive data of over 4.2 billion IP addresses and counting to provide threat-relevant information about malicious IP addresses, malicious links, phishing websites, certificates, industrial control systems, IoTs, servers, CCTVs, etc. Using Criminal IP’s four key features (Asset Search, Domain Search, Exploit Search, and Image Search), you can search for IP risk scores and vulnerabilities related to searched IP addresses and domains, vulnerabilities for each service, and assets that are open to cyber attacks in image forms, in respective order.
-
RealCISORealCISO is a compliance intelligence platform for two audiences: MSPs and MSSPs managing security across multiple clients, and enterprise teams running compliance in-house. MSPs, MSSPs, and security consultants use it to run compliance assessments, manage cyber risk, track remediation, and report to boards — all in one place. Assessments map directly to NIST CSF, SOC 2, NIST 800-171, HIPAA, CIS Controls, CMMC, and 30+ other frameworks. Instead of months of spreadsheet work, clients get a clear picture of where they stand and what to fix — in days. Over 3,000 security providers rely on RealCISO to deliver vCISO services at scale. Built by practitioners. Founded by Brian Haugli — former DoD, former VP & CSO at The Hanover Insurance Group, CISSP, and co-author of the NIST CSF book published by Wiley.
-
ThreatLockerThreatLocker is a Zero Trust security platform that stops cyber threats by allowing only approved applications and activity to run. It removes standing admin rights, enforces least privilege, and gives organizations precise control over software behavior. With capabilities like application control, ringfencing, and device and storage restrictions, it prevents ransomware, zero day exploits, and unauthorized actions before they can execute. Purpose built for IT and security teams, ThreatLocker offers centralized management and full visibility across endpoints, users, and applications. It helps shrink the attack surface, restrict lateral movement, and meet compliance requirements with detailed auditing. Quick to deploy and easy to manage, the platform includes a large maintained application library and simplified approval workflows, enabling stronger security with less operational burden while keeping the business running smoothly.
-
D&B Risk AnalyticsGlobally, teams in risk, procurement, and compliance are under pressure to manage geopolitical risks and business risks. Third-party risks are impacted by the complexity of domestic and international businesses, as well as complex and diverse regulations. It is crucial that companies proactively manage third-party relationships. This cutting-edge platform, powered by D&B Data Cloud's 520M+ Global Business Records with 2B+ annual updates for third-party risks, is an AI-powered solution that mitigates and monitors counterparty risk on a continual basis. D&B Risk Analytics uses best-in class risk data, including alerts for high-risk purchases and match points of more than a billion. This helps to drive informed decisions. Intelligent workflows allow for quick and thorough screening. Receive alerts on key business indicators.
-
JscramblerJscrambler is the leader in Client-Side Security, protecting the code, data, and digital interactions that power today’s modern web applications. Modern applications are changing rapidly as development teams adopt AI-generated code, rely on third-party software components, and embed AI-powered agents into digital experiences. Meanwhile, sensitive information is increasingly created and processed in the browser itself. This creates a critical gap in enterprise security: organizations need to govern not only what code enters an application, but how that code, scripts, and data behave when the application runs. Jscrambler closes that gap with a Client-Side Security Platform built around its Behavioral Enforcement Core. The platform continuously monitors and enforces how application code, including AI-generated code, third-party scripts, AI agents, and sensitive data behave in the browser. By enforcing software integrity and data governance at runtime, Jscrambler gives organizations control at the point where code executes and data is created—before sensitive information can be exposed or transmitted. Organizations across retail, financial services, travel, healthcare, and other industries use Jscrambler to detect and stop client-side attacks, protect against risks introduced by AI-developed and third-party code, control AI-driven data flows, and strengthen compliance with requirements including PCI DSS, GDPR, HIPAA, CIPA, CCPA, and the EU AI Act.
-
NINJIONINJIO is an all-in-one cybersecurity awareness training solution that lowers human-based cybersecurity risk through engaging training, personalized testing, and insightful reporting. This multi-pronged approach to training focuses on the latest attack vectors to build employee knowledge and the behavioral science behind human engineering to sharpen users’ intuition. Our proprietary NINJIO Risk Algorithm™ identifies users’ social engineering vulnerabilities based on phishing simulation data and informs content delivery to provide a personalized experience that changes individual behavior. With NINJIO you get: - NINJIO AWARE attack vector-based training that engages viewers with Hollywood style, micro learning episodes based on real hacks. - NINJIO PHISH3D simulated phishing identifies the specific social engineering tricks most likely to fool users in your organization. - NINJIO SENSE is our new behavioral science-based training course that shows employees what it “feels like” when hackers are trying to manipulate them.
-
LeakCheckTake control of your cybersecurity and safeguard your credentials with ASCOMP LeakCheck. This privacy-focused Windows application allows you to verify if your email addresses and passwords have been compromised in historical data leaks, performing all checks securely right from your desktop. Security is the top priority: LeakCheck uses advanced k-anonymity technology. Your passwords are never transmitted in plain text; instead, encrypted hashes are used to safely query extensive breach databases. If any match is found, the software displays immediate warnings alongside detailed context, including the name, source, and date of the breach. With LeakCheck, you can proactively defend your online identity, pinpoint vulnerable accounts, and update compromised passwords before unauthorized users can exploit them.
Description
Bitsight is a leading Cyber Risk Intelligence platform that helps organizations identify, quantify, and reduce cybersecurity risk across their entire digital ecosystem. Powered by advanced AI and the industry’s largest external cybersecurity dataset, Bitsight delivers real-time visibility into security posture, threat exposure, and attack surface risk.
Trusted by more than 3,500 customers worldwide and over 68,000 organizations on its platform, Bitsight enables security teams, risk leaders, and executives to proactively manage cyber risk through continuous security monitoring, third-party risk management (TPRM), vulnerability intelligence, and external attack surface management (EASM).
Bitsight uncovers critical security gaps across cloud environments, digital identities, and complex third- and fourth-party vendor ecosystems. With actionable security and threat intelligence insights, and prioritized remediation guidance, organizations can detect emerging threats, reduce vendor risk, strengthen cybersecurity governance, and prevent breaches before they impact business performance.
From SOC analysts and GRC teams to CISOs and board members, BitSight provides a unified cyber risk management platform designed to support compliance, improve security posture, and drive data-informed risk decisions.
Description
SecPod Saner CVEM is a unified vulnerability and exposure management platform built to help security teams continuously detect, prioritize, and fix risks across their IT environment. The platform combines asset intelligence, vulnerability management, compliance checks, posture anomaly detection, endpoint management, patch management, and remediation workflows in a single console. Saner CVEM is designed to go beyond CVE-based scanning by identifying configuration drift, posture anomalies, compliance gaps, asset exposures, shadow IT, and unusual behavior across devices. Its AI and machine-learning models monitor more than 100 device parameters to detect risks that may not appear in standard vulnerability feeds. The platform prioritizes issues based on exploit likelihood, CISA KEV status, SSVC guidance, asset importance, business context, and attacker behavior mapped through MITRE ATT&CK and CWE. Saner CVEM also supports continuous SCAP and OVAL-based scans across operating systems and more than 550 third-party applications. Security teams can use its integrated remediation and patch deployment capabilities to reduce tool-switching, cut mean time to remediate, and improve patch compliance. The platform is built around a lightweight agent that supports Windows, Linux, and macOS environments. SecPod Saner CVEM is designed for organizations that want complete asset visibility, stronger exposure reduction, and a more automated path from detection to prevention.
API Access
Has API
Yes
API Access
Has API
No
Integrations
Archer
Yes
BCMLogic Next
Yes
Censys
Yes
Cortex XSIAM
Yes
Coupa
Yes
CyCognito
Yes
Datadog
Yes
IBM Security Randori Recon
Yes
IONIX
Yes
Interos
Yes
Integrations
Archer
No
BCMLogic Next
No
Censys
No
Cortex XSIAM
No
Coupa
No
CyCognito
No
Datadog
No
IBM Security Randori Recon
No
IONIX
No
Interos
No
Pricing Details
Pricing is customized and quote-based for each customer, tailored to their needs, size, and scope of monitoring
Free Trial
Yes
Free Version
No
Pricing Details
$50/year/device
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Vendor Details
Company Name
Bitsight
Founded
2011
Country
United States
Website
www.bitsight.com
Vendor Details
Company Name
SecPod Technologies
Founded
2008
Country
United States
Website
www.secpod.com
Product Features
Risk Management
Alerts/Notifications
Yes
Auditing
Yes
Business Process Control
No
Compliance Management
Yes
Corrective Actions (CAPA)
No
Dashboard
Yes
Exceptions Management
No
IT Risk Management
Yes
Internal Controls Management
No
Legal Risk Management
No
Mobile Access
No
Operational Risk Management
No
Predictive Analytics
Yes
Reputation Risk Management
Yes
Response Management
Yes
Risk Assessment
Yes
Product Features
Application Security
Analytics / Reporting
Yes
Open Source Component Monitoring
Yes
Source Code Analysis
No
Third-Party Tools Integration
No
Training Resources
No
Vulnerability Detection
Yes
Vulnerability Remediation
Yes
Compliance
Archiving & Retention
No
Artificial Intelligence (AI)
No
Audit Management
No
Compliance Tracking
Yes
Controls Testing
No
Environmental Compliance
No
FDA Compliance
No
HIPAA Compliance
Yes
ISO Compliance
Yes
Incident Management
No
OSHA Compliance
No
Risk Management
Yes
Sarbanes-Oxley Compliance
No
Surveys & Feedback
No
Version Control
No
Workflow / Process Automation
No
Cybersecurity
AI / Machine Learning
No
Behavioral Analytics
No
Endpoint Management
Yes
IOC Verification
No
Incident Management
Yes
Tokenization
No
Vulnerability Scanning
Yes
Whitelisting / Blacklisting
Yes
Endpoint Detection and Response (EDR)
Behavioral Analytics
Yes
Blacklisting/Whitelisting
Yes
Continuous Monitoring
Yes
Malware/Anomaly Detection
No
Prioritization
Yes
Remediation Management
Yes
Root Cause Analysis
No
Endpoint Protection
Activity Log
Yes
Antivirus
No
Application Security
Yes
Behavioral Analytics
Yes
Device Management
Yes
Encryption
No
Signature Matching
No
Web Threat Management
Yes
Whitelisting / Blacklisting
Yes
HIPAA Compliance
Access Control / Permissions
No
Audit Management
Yes
Compliance Reporting
Yes
Data Security
No
Documentation Management
No
For Healthcare
Yes
Incident Management
Yes
Policy Training
No
Remediation Management
Yes
Risk Management
Yes
Vendor Management
No
IT Asset Management
Asset Tracking
Yes
Audit Management
Yes
Compliance Management
Yes
Configuration Management
Yes
Contract/License Management
Yes
Cost Tracking
Yes
Depreciation Management
No
IT Service Management
Yes
Inventory Management
Yes
Maintenance Management
No
Procurement Management
No
Requisition Management
No
Supplier Management
Yes
Patch Management
Alerts/Notifications
Yes
Automatic Approval
Yes
Automatic Patch Deployment
Yes
Automatic Scans
Yes
Compliance Management
Yes
Custom Patches
Yes
Dashboard
Yes
Network Wide Management
Yes
Patch Prioritization
Yes
Patch Testing
Yes
Remote Access/Control
No
Vulnerability Scanning
Yes
PCI Compliance
Access Control
No
Compliance Reporting
Yes
Exceptions Management
No
File Integrity Monitoring
No
Intrusion Detection System
No
Log Management
No
PCI Assessment
Yes
Patch Management
Yes
Policy Management
No
Vulnerability Management
Asset Discovery
Yes
Asset Tagging
Yes
Network Scanning
No
Patch Management
Yes
Policy Management
No
Prioritization
Yes
Risk Management
Yes
Vulnerability Assessment
Yes
Web Scanning
No
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No
