Tenable Nessus

Detectify

Detectify is an application security platform that performs dynamic vulnerability scanning across external attack surfaces, testing domains, IPs, APIs, and applications with payload-based techniques rather than relying solely on static signature matching. Its Surface Monitoring product continuously discovers and maps external assets while testing them for exploitable vulnerabilities. Detectify's API scanning uses Dynamic AI Fuzzing to test REST and GraphQL endpoints, and its Application Scanning performs deep, authenticated DAST testing with AI-powered fuzzing and crawling. A distinctive part of the platform is its Crowdsource network of more than 400 ethical hackers who feed newly discovered vulnerabilities, including many without an assigned CVE, into Detectify's scanner within minutes of research.

Intruder

Intruder is a cloud-based exposure management platform that helps organizations identify and remediate security vulnerabilities before attackers can exploit them. It combines AI-assisted penetration testing, attack surface monitoring, cloud security posture management, and vulnerability scanning into a single platform. The platform performs daily configuration checks across AWS, Azure, and Google Cloud, scans external infrastructure, web applications, APIs, and container images, and includes GregAI, a virtual security analyst that helps automate triage and remediation guidance. Intruder is used by more than 3,000 companies and supports compliance frameworks including SOC 2, ISO 27001, PCI DSS, HIPAA, and DORA.

Qualys

Qualys is an enterprise cyber risk and security platform built to help organizations "measure, communicate, and eliminate cyber risk." Its flagship VMDR (Vulnerability Management, Detection and Response) product continuously and automatically discovers assets across a network, including endpoints, servers, cloud workloads, containers, and IoT devices, then scans and prioritizes vulnerabilities for remediation. The platform emphasizes consolidation, positioning itself as a way for organizations to streamline and automate security and compliance work onto a single cloud platform rather than juggling multiple point tools, aiming for greater agility, better outcomes, and lower cost. Qualys does not publish list pricing on its site; prospective customers request pricing through the company's sales team based on organization size and needed modules.

Greenbone (OpenVAS)

Greenbone develops the OpenVAS vulnerability scanning engine, one of the most widely deployed open-source vulnerability management systems, used to discover assets and identify security weaknesses across desktops, servers, network devices, and IoT/industrial equipment before attackers can exploit them. Its enterprise feed grows continuously and includes over 100,000 vulnerability tests, with automated, schedulable scans and severity-based prioritization of findings. Greenbone offers several deployment paths: a free, open-source OpenVAS edition for self-hosting, an entry-level cloud/SaaS option (OpenVAS Basic) aimed at small businesses with a 14-day free trial, and hardware appliances or virtual-machine images for larger, on-premises enterprise deployments with GDPR-compliant data handling.

UpGuard

UpGuard is a cyber risk posture management platform that helps organizations identify and reduce security risk across their vendor relationships, attack surface, and internal workforce. It continuously scans a company's external digital footprint to surface exposed assets, misconfigurations, and vulnerabilities, and produces security ratings that can be used to benchmark and monitor third-party vendors over time. The platform is used by over 45,000 companies across financial services, healthcare, technology, and education, and includes a Trust Exchange feature that automates security questionnaire handling between organizations and their vendors. Additional modules cover user risk management, including shadow AI usage monitoring, with automation workflows for discovery, notification, and remediation driven through its API.