niche · 0.0 marketcapability domainresource

Attack Surface Management

Score 18.5 / 100 29 providers +3 via APIs 5 APIs Search apis.io →

Providers using this tag (29)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 4 Solid coverage with minor gaps
CensysSecurityInternet IntelligenceThreat Hunting2 APIs65.23-shakeCompanySREData IntegrationETL1 API56.5Method SecurityCompanySecurityCybersecurityOffensive Security1 API54.9Nord SecurityCybersecurityThreat IntelligenceDark Web Monitoring7 APIs54.8
Developing 10 Usable, with meaningful gaps to close
JupiterOneCompanySecurityCAASMCyber Asset Management1 API53.9TenableCompanyEnterpriseCybersecurityVulnerability Management8 APIs53.8ProjectDiscoveryCompanyCybersecuritySecurityVulnerability Scanning1 API52.0UpGuardCompanyCybersecurityThird-Party Risk Management1 API50.4CoalitionCyber InsuranceInsuranceInsurtechRisk Management1 API50.2SynackCompanySecurityPenetration TestingVulnerability Management9 APIs48.5Horizon3.aiCompanySecurityCybersecurityPenetration Testing1 API46.0CyCognitoCompanyCybersecurityExposure Management1 API45.0CybleThreat IntelligenceCybersecurityInternet Scanning2 APIs43.4detectifyCompanySecurityCybersecurity1 API40.8
Thin 2 Limited public surface area
watchTowrCompanySecurityCybersecurity1 API34.6BitSightCompanySecurityCyber RiskSecurity Ratings1 API29.1
Emerging 6 Early or largely undocumented
Bishop FoxCompanyCybersecurityOffensive SecurityPenetration Testing1 API20.3AsteliaCompanySecurityVulnerability ManagementExposure Management17.4MandiantCompanySecurityThreat IntelligenceCybersecurity2 APIs17.3Efflux SystemsCompanySecurityCybersecurity1 API13.3Perimeter VRM (formerly ProcessBolt)CompanyVendor Risk ManagementThird-Party RiskGovernance Risk Compliance13.3QomplxCompanyCybersecurityIdentity Threat DetectionManaged Detection and Response1 API11.3
Minimal 6 Almost no public developer surface
ArmadinCompanySecurityCybersecurityOffensive Security10.2LucidumCompanySecurityCAASMCyber Asset Management9.2MokNCompanyEnterpriseCybersecurityThreat Detection8.1RiskIQCompanySecurityThreat Intelligence5.7ExpanseCompanyCybersecuritySecurity5.0HuaunCompanyEnterpriseCybersecurity5.0
Unrated 1 Not yet scored
Skybox SecurityCompanySecurityCybersecurityNetwork Security

APIs with this tag (5)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Strong 1 Solid coverage with minor gaps
Securify Scan Public APIPublic API for Securify Scan, 3-shake's automated vulnerability-diagnosis and ASM platform. A tenant create...56.5
Developing 1 Usable, with meaningful gaps to close
Google Threat Intelligence - Attack Surface Management (ASM)Enterprise add-on (formerly Mandiant Advantage ASM). Discovers and monitors an organisation's external atta...50.5
Thin 2 Limited public surface area
Balbix REST APIThe Balbix REST API (v1) gives programmatic read access to the asset, vulnerability, misconfiguration, soft...38.3Cequence API SpyderAPI Spyder is a SaaS-based, agentless external discovery service that provides an attacker's view into an o...38.2
Emerging 1 Early or largely undocumented
Bishop Fox Cosmos API (v5)Authenticated REST API for the Bishop Fox Cosmos attack-surface management platform. Exposes the customer's...20.3

Companies reaching this through an API (3)

These companies publish an API, specification or operation carrying “Attack Surface Management” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Cequence Security SAFE Security VirusTotal

Score breakdown

Frequency
41.8
log-scaled weighted occurrences
Breadth
0.8
spread across providers
Quality lift
37.1
mean composite of providers using it
Cohesion
2.8
strength of nearest seed neighbor

Related tags

Exposure Management 7 co-occurrences Vulnerability Management 15 co-occurrences Penetration Testing 5 co-occurrences Threat Intelligence 12 co-occurrences Cybersecurity 24 co-occurrences Cloud Security 5 co-occurrences Security 24 co-occurrences Assets 6 co-occurrences

Where this tag comes from

Provider tag29
Api tag5

Cohort brief

Auto-generated

The 27 providers in the APIs.io catalog tagged Attack Surface Management, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers
27
all scored
Mean Kin Score
33.7
+9.7 vs catalog 24
Mean Agent Readiness
19
+6.6 vs catalog 12.4
Spread
5–65.2
median 40.8 · σ 19.5
How the 27 split by band
Exemplar 0Strong 4Developing 10Thin 2Emerging 6Minimal 5
Facet averages, against the whole catalog
FacetThis cohortCatalogDifferenceScored
Developer Ergonomics 39.8 23.4 +16.4 27
Contract Quality 30.5 20.1 +10.4 27
Access Clarity 35.2 26.5 +8.7 27
Operational Transparency 22 14 +8 27
Discoverability 68.3 61 +7.3 27
Contract Governance 8.1 6.5 +1.6 27

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes
ArtifactThis cohortCatalogDifference
MCP server (any) 25% 10% +15
MCP server (first-party) 29% 13% +16
Agent Skills 0% 0% 0
OAuth scopes 11% 11% 0
Security 100% 96% +4
Arazzo workflows 0% 2% -2
Governance rules 7% 13% -6

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score
  1. 1 Censys 65.2
  2. 2 3-shake 56.5
  3. 3 Method Security 54.9
  4. 4 Nord Security 54.8
  5. 5 JupiterOne 53.9
  6. 6 Tenable 53.8
  7. 7 ProjectDiscovery 52
  8. 8 UpGuard 50.4
  9. 9 Coalition 50.2
  10. 10 Synack 48.5
Top by Agent Readiness
  1. 1 Horizon3.ai 48.4
  2. 2 Nord Security 43.5
  3. 3 CyCognito 38.7
  4. 4 Tenable 36.7
  5. 5 watchTowr 36.5
  6. 6 Method Security 34.6
  7. 7 3-shake 28.9
  8. 8 Censys 28.1
  9. 9 Coalition 28.1
  10. 10 UpGuard 27.5
All 29 members of this roster resolve to a scored provider in the catalog.Generated from the catalog build of 20 September 2026, across 27620 providers, using the same computation served by the APIs.io cohort API. Briefs are published for rosters of 5 or more scored providers; below that a distribution is not meaningful.

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/attack-surface-management"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/attack-surface-management"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/attack-surface-management/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.