Info
runZero is the pick when your blind spot sits inside the network, Cortex Xpanse when you need discovery that does not depend on a list you supply, and CrowdStrike Falcon Exposure Management when external findings have to resolve to real endpoints. All seven were compared on pricing transparency, discovery method, official MCP support, and API depth.
runZero is the best overall attack surface management software for most teams in 2026, mainly because it publishes a starting price and ships the most complete first-party MCP tooling in the category. If your problem is forgotten internet-facing infrastructure rather than unmanaged internal devices, Palo Alto Networks Cortex Xpanse finds more of it. For the best attack surface management software for small business budgets, Intruder's free tier and runZero's free-up-to-100-assets Community Edition are the two that don't require a sales conversation before you can start using them.
Attack surface management stopped being a novelty around 2024. The category now splits along a line that matters at purchase time: tools that scan the internet and work backward to you, and tools that scan your networks and work outward. Both use the same label. They find different things.
What changed in 2026 is the AI tooling layer. Four of the seven products here publish a first-party MCP server, so an analyst can ask an agent about live exposure data instead of exporting CSVs. A year ago that was a curiosity. It is now a real differentiator, and most buying guides still skip it.
Why You Need Attack Surface Management
- Unknown assets outnumber known ones. Palo Alto Networks reports that the average Cortex Xpanse customer discovers 35% more internet-connected assets than they were already tracking.
- The exposure window is measured in minutes. Attackers scan the whole internet for a new vulnerability within 15 minutes of disclosure, per Palo Alto Networks.
- Mergers create instant blind spots. Every acquisition inherits domains, certificates, and cloud accounts nobody on your team registered.
- Shadow cloud accounts bypass procurement. A developer with a corporate card can stand up production infrastructure that never appears in the CMDB.
- Ownership is the hard part, not detection. Finding an exposed host is easy. Routing it to the team that can turn it off is where most programs stall.
Adjacent controls these platforms feed into sit in our cybersecurity software category.
How We Evaluated
Each product was scored on four things: whether pricing is published at all, how discovery actually works (seeded, unseeded, or internal scanning), the maturity of AI and MCP support with official servers separated from community builds, and the depth of the public API including tier restrictions. Every pricing figure below came from the vendor's own pricing page in August 2026, never from a review aggregator. Full criteria live in our methodology.
1. Palo Alto Networks Cortex Xpanse
Xpanse sits at the discovery-first end of this market. Palo Alto scans the entire IPv4 space several times a day and attributes what it finds back to your organization, rather than waiting for you to hand it a seed list of domains. That distinction is the whole product.
Pricing: Not published. Palo Alto Networks quotes Cortex Xpanse through sales, and no rate card appears on the product page as of August 2026.
Top Features
- Entire IPv4 space rescanned several times daily
- Automatic attribution of unknown assets to owners
- Supply chain and partner asset inventory
- Attack surface testing to confirm live exposures
- XSOAR playbook routing for remediation
- AI infrastructure detections including MCP servers
Pros
- Discovery does not depend on a seed list you supply
- Average customer finds 35% more assets than previously tracked
- Routes findings straight into Cortex XSIAM and XSOAR workflows
Cons
- No published pricing at any tier
- Value drops sharply outside the Palo Alto ecosystem
AI/MCP Integration: Official at the platform level. Palo Alto Networks released the Cortex MCP Server in open beta on December 4, 2025, covering Cortex XSIAM, XDR, and Cloud. Xpanse is not listed among its covered products as of August 2026.
API Integration: Yes. Cortex Xpanse exposes a documented REST API through the Cortex documentation portal.
Cloud Based: Yes, SaaS only.
Platforms: Web console. Discovery is agentless, so nothing installs on endpoints.
Best For: Large enterprises with sprawling subsidiaries and no reliable asset inventory to start from.
Editor score: 4.5/5. The strongest discovery engine in the group, held back by pricing you cannot evaluate without a sales cycle.
2. Microsoft Defender External Attack Surface Management
If your estate already runs on Azure, Defender EASM is the least disruptive way to add an outside-in view. You deploy it as an Azure resource inside a resource group, not as a separate console with its own identity model. In practice that decides whether the tool survives the pilot.
Pricing: Not published. Microsoft's Defender EASM pricing page directs buyers to the Azure pricing calculator or to sales. A 30-day free trial is available without a sales conversation.
Top Features
- Deployed as a native Azure resource
- Discovery built from seed domains and infrastructure
- Attack surface insights mapped to known CVEs
- Data connectors into Log Analytics and Azure Data Explorer
- Available across 14 Azure regions
- REST API documented on Microsoft Learn
Pros
- 30-day free trial with no sales call required
- Billing and identity ride on an existing Azure subscription
- Inventory data exports for correlation with other Microsoft security signals
Cons
- No rate card published on the pricing page
- Regional availability limited to 14 Azure locations
AI/MCP Integration: Official at the platform level, not the product level. Microsoft's Sentinel MCP server reached general availability on November 18, 2025 and exposes the Sentinel data lake including Defender XDR data. No Defender EASM specific MCP server is documented as of August 2026.
API Integration: Yes. A full REST API is documented on Microsoft Learn under the Defender EASM reference.
Cloud Based: Yes, Azure only.
Platforms: Azure portal plus REST. No agents.
Best For: Microsoft-first security teams that want EASM billed and governed like any other Azure resource.
Editor score: 4.1/5. The cheapest to trial and the easiest to justify internally, but it gives back most of that advantage outside Azure.
3. CrowdStrike Falcon Exposure Management
CrowdStrike folded its external attack surface product, Falcon Surface, into the wider Falcon Exposure Management module. The argument is that outside-in discovery and inside-out endpoint telemetry belong in one place, so an exposed host resolves to a machine you already have an agent on rather than to an orphan IP address. When that correlation lands, triage time drops noticeably.
Pricing: Not published for Exposure Management. CrowdStrike lists Falcon Go at $59.99 per device per year, Falcon Pro at $99.99, and Falcon Enterprise at $184.99. Exposure Management is quoted separately, with a 15-day free trial.
Top Features
- Falcon Surface for 24/7 internet-facing monitoring
- Attack path analysis across endpoint and cloud assets
- Exposure Prioritization Agent for ranking findings
- AI discovery for shadow AI systems
- Works alongside third-party endpoint agents
- Single console shared with Falcon detection data
Pros
- External findings correlate to real endpoint telemetry
- Runs without replacing an incumbent EDR
- Official MCP server published openly on GitHub
Cons
- Exposure Management pricing requires a sales conversation
- Most of the value assumes broader Falcon platform adoption
AI/MCP Integration: Official. CrowdStrike publishes falcon-mcp on GitHub with documentation at developer.crowdstrike.com, exposing detections, incidents, threat intelligence, hosts, vulnerabilities, and identity protection. It is in public preview, and CrowdStrike advises against production deployment before the 1.0 release.
API Integration: Yes. The Falcon OAuth2 REST API backs both the MCP server and every supported integration.
Cloud Based: Yes, SaaS.
Platforms: Windows, macOS, and Linux for agent coverage, plus a web console.
Best For: Teams already running Falcon who want the external view joined to endpoint context they trust.
Editor score: 4.4/5. The clearest MCP story in this group, and unusually honest about its preview status.
Agent-based alternatives sit in our endpoint security software category.
4. Tenable One Attack Surface Management
Tenable's ASM is the discovery front end to an exposure platform whose real depth is vulnerability data. It maps your domains against an index of more than 5 billion assets to work out what belongs to you. Bought standalone it feels thin. Bought as the front door to Tenable One, the scoring downstream is what you are paying for.
Pricing: Not published. Tenable directs ASM buyers to its sales team or to a partner.
Top Features
- Attack surface map of more than 5 billion assets
- Continuous monitoring with change notifications
- Business context metadata attached to discovered assets
- Feeds directly into Tenable One exposure scoring
- Supports M&A diligence and brand protection use cases
- Public developer portal covering platform APIs
Pros
- Discovery joins to Tenable's vulnerability assessment depth
- Metadata supports non-security work like M&A review
- Sold as one platform rather than a bolt-on module
Cons
- No published pricing for the ASM component
- No first-party MCP server as of August 2026
AI/MCP Integration: Community only. Tenable Research has published guidance on MCP security but does not ship a first-party server. Third-party servers built on the pyTenable SDK exist on GitHub and carry no vendor support.
API Integration: Yes. Tenable runs a public developer portal at developer.tenable.com covering its product APIs.
Cloud Based: Yes, with Tenable Security Center available for on-premises vulnerability management.
Platforms: Web console, with agent and agentless scanning across the wider platform.
Best For: Organizations standardizing on Tenable One that want discovery and vulnerability scoring in one place.
Editor score: 4.0/5. A strong platform with the thinnest AI tooling story of the seven.
If asset ownership is the real bottleneck, see our IT management software category.
5. runZero
runZero attacks the problem from the inside. It runs unauthenticated active scanning that fingerprints what is actually sitting on your networks, including OT gear and devices that will never take an agent, then layers external discovery on top. It is also the only vendor here publishing both a free tier and a commercial starting price.
Pricing: Community Edition is free for up to 100 assets. The commercial runZero Platform starts at $5,000.
Top Features
- Unauthenticated active scanning with device fingerprinting
- Free Community tier capped at 100 assets
- SaaS or self-hosted console deployment
- More than 40 integrations on the Platform tier
- Three-year data retention on Platform
- First-party MCP server at the console endpoint
Pros
- Published starting price, rare in this category
- Self-hosted console option suits regulated environments
- Finds OT and unmanaged devices that agent-based tools miss
Cons
- Community tier retains only 30 days of data
- External discovery is narrower than dedicated internet-wide scanners
AI/MCP Integration: Official. runZero documents a first-party MCP server at console.runzero.com/mcp over streaming HTTP, with tools for assets, software, certificates, vulnerabilities, findings, organizations, sites, remediation, and scan initiation. Authentication uses an account API key.
API Integration: Yes. Community includes the Export API. Platform adds Organization, Account, and custom SDK access.
Cloud Based: Yes, with a self-hosted console option.
Platforms: Web console with scanner deployment across Windows, macOS, and Linux hosts.
Best For: Teams whose real blind spot is internal and OT assets rather than forgotten subdomains.
Editor score: 4.6/5. The best price transparency and the most complete first-party MCP tooling of the seven.
Network-side visibility pairs naturally with our network monitoring software category.
6. Detectify
Detectify is the only vendor here that puts a full annual price list on its website. Its testing comes from a crowdsourced research community, so coverage skews toward real web application findings rather than generic CVE matching. That helps application security teams and hurts if your exposure is mostly infrastructure.
Pricing: Starter carries a 0 euro annual platform fee for up to five users. Standard is 2,500 euros per year, Professional 5,000 euros, and Enterprise 15,000 euros. Surface Monitoring is priced per domain, Application Scanning per target, and PCI ASV scanning adds 500 euros per year.
Top Features
- Published annual price list across four tiers
- Crowdsourced vulnerability research from ethical hackers
- REST and GraphQL API scanning on every tier
- IP range and apex domain discovery from Professional
- CI/CD integration with internal environment scanning
- Remote-hosted first-party MCP server
Pros
- The only vendor here with a public annual rate card
- Free Starter tier includes API scanning
- MCP server supports Claude Code, Cursor, and ChatGPT
Cons
- Surface Monitoring and Application Scanning are billed per domain and per target on top
- Discovery breadth trails internet-wide scanners
AI/MCP Integration: Official. Detectify runs a remote-hosted MCP server built as a proxy over its existing API, supporting Claude Code, Claude Desktop, Cursor, and ChatGPT. Its tools cover scan tracking with live progress, vulnerability lookup filtered by severity or domain, asset status checks, and report summaries.
API Integration: Yes. Detectify documents a public API at developer.detectify.com.
Cloud Based: Yes, with internal scanning agents included on Enterprise.
Platforms: Web console plus internal scanning agents on higher tiers.
Best For: Application security teams that want web-layer depth and a number they can budget without a sales call.
Editor score: 4.3/5. Pricing clarity counts for a lot here; discovery breadth is the trade you accept for it.
Application-layer buyers should also review our application security tools.
7. Intruder
Intruder is the lean-team option. It bundles attack surface discovery with continuous vulnerability scanning and keeps the console simple enough for a two-person team to run day to day. The free plan is not a demo in disguise, though API access starts one tier up.
Pricing: The Free plan is $0 with no expiry. Cloud and Pro are a base fee plus a per-target fee, with exact figures shown once you configure target counts. Enterprise is custom quoted. A 14-day trial is available and annual billing takes 20% off.
Top Features
- Free forever plan requiring no card
- Base fee plus per-target pricing model
- Continuous scanning triggered by newly disclosed exposures
- More than 15 integrations from the Cloud tier
- Web application scanning above the free tier
- First-party MCP server published on GitHub
Pros
- Free tier is genuinely usable for small estates
- Pricing model is explained plainly even where the numbers are gated
- Official MCP server built directly on the public API
Cons
- No API access on the free plan
- Exact tier pricing is not visible until you configure targets
AI/MCP Integration: Official. Intruder publishes intruder-mcp under its own GitHub organization, built with FastMCP over the public API. It installs through Python, Docker, or Smithery and requires an Intruder API key.
API Integration: Yes, from the Cloud tier upward. The free plan excludes API access entirely.
Cloud Based: Yes, SaaS only.
Platforms: Web console with agentless scanning.
Best For: Small and mid-sized teams that want discovery plus scanning in one tool without an enterprise contract.
Editor score: 4.2/5. The right shape for lean teams. Gated tier pricing costs it half a point.
Comparison Table
| Tool | Best For | Starting Price | Standout Feature | AI-MCP Support | API Integration |
|---|---|---|---|---|---|
| Cortex Xpanse | Unseeded enterprise discovery | Quote only | Full IPv4 rescans daily | Platform server, beta | REST |
| Defender EASM | Azure-native security teams | Quote only, 30-day trial | Native Azure resource | Platform server, GA | REST |
| Falcon Exposure Management | Existing Falcon customers | Quote only, 15-day trial | Attack path analysis | Official, public preview | REST |
| Tenable One ASM | Tenable One standardizers | Quote only | 5 billion asset map | Community builds only | REST |
| runZero | Internal and OT blind spots | Free to 100 assets | Unauthenticated fingerprinting | Official, documented | REST |
| Detectify | Budget-transparent appsec | 0 euro platform fee | Public annual rate card | Official, hosted | REST |
| Intruder | Lean security teams | $0 free plan | Base plus per-target pricing | Official, on GitHub | REST from Cloud tier |
More security tooling breakdowns live in our IT security and DevOps blog category.
How to Choose
- Decide first whether your gap is external or internal. Cortex Xpanse and Defender EASM answer the outside-in question; runZero answers the inside-out one. Buying the wrong half is the most common mistake in this category.
- Check whether discovery needs a seed list. Seeded discovery finds only what you can already partially describe.
- Confirm API access at the tier you can afford. Intruder's free plan and runZero's Community Edition both restrict it.
- Separate official MCP servers from community builds. A community server on GitHub can disappear without notice and carries no support path.
- Test attribution, not just detection. Ask each vendor to show how a discovered asset reaches an accountable owner.
- Budget for add-ons. Detectify's tier price excludes Surface Monitoring and Application Scanning; Intruder's base fee excludes per-target charges.
- Weigh ecosystem lock-in honestly. Three of these seven are worth much less outside their parent platform.
What This Actually Costs
Take a mid-market company with roughly 600 discoverable assets and a two-person security team. runZero Community caps at 100 assets, so the Platform tier applies at $5,000 a year. Detectify Professional lands at 5,000 euros a year before Surface Monitoring domain fees, plus 500 euros for PCI ASV if you need it. Intruder's free plan covers discovery at $0, but the missing API forces an upgrade the moment you want automation.
The four quote-only platforms will not give you a number without a call. Budget two to four weeks of procurement before you can compare them at all.
Final Thoughts
Most guides in this category rank on discovery breadth alone, which is why Cortex Xpanse tends to win them. It earns that on the axis being measured. But breadth is not the binding constraint for most teams in 2026; ownership and automation are.
runZero takes the overall pick because it publishes a price, self-hosts when it has to, and ships MCP tooling covering remediation and scan initiation rather than read-only queries. Choose Cortex Xpanse if you are an enterprise with an inventory you genuinely do not trust. Choose Falcon Exposure Management if you already run Falcon and want one console. Choose Detectify if a published price matters more than internet-wide reach, and Intruder if your whole security function fits in one meeting room.
Four of these seven still publish no pricing at all. In a category built on eliminating unknowns, that is a strange position to hold.