Detectify Surface Monitoring continuously tracks internet-facing assets for exposed files, vulnerabilities and misconfigurations. It discovers domains, subdomains, IP addresses and ranges, open ports and running technologies; cloud connectors for AWS, Azure, Cloudflare and GCP help find assets across an external attack surface. Thousands of security tests cover issues such as misconfigurations, XSS, SSRF and RCE. Teams can define custom rules for changes to their attack surface, then filter and tag findings that include remediation tips. Detectify incorporates research from a community of more than 400 ethical hackers and says findings can reach implementation in as little as 15 minutes. Integrations include Jira, Slack, Microsoft Teams, PagerDuty, OpsGenie, ServiceNow, Splunk, webhooks, GitLab and GitHub Actions. The cloud service provides API access, authenticated and browser-based scanning, API testing and CI/CD integration. Annual platform fees range from 0.00 EUR per year for Starter to 15000.00 EUR per year for Enterprise. Surface Monitoring costs extra per domain on every plan, and added assets, domains, environments and IP ranges may bring further charges. A 14-day trial is listed.
Who it is for
Surface Monitoring is aimed at security teams responsible for visibility into internet-facing assets and remediation of related findings. Its API, scanning and CI/CD capabilities may suit teams integrating monitoring into existing workflows.
What is good
- Continuously discovers external assets and running technologies
- Tests for issues including XSS, SSRF and RCE
- Custom rules monitor attack-surface changes
- Findings include remediation tips
What to know first
- Surface Monitoring costs extra per domain on every plan
- Added assets, domains, environments and IP ranges may cost extra
- Listed platform fees are billed annually
Verdict
Surface Monitoring combines asset discovery, continuous checks and tools for triaging findings. Account for the additional domain and asset charges alongside the annual platform fee when evaluating a plan.
Detectify Surface Monitoring plans and pricing
All plansCompared on web application security scanners
- Free plan
- Yes
- External asset discovery
- Yes
- Cloud asset discovery
- Yes
- Monitoring frequency
- continuous
- API access
- Yes
