Lightweight external and internal scanning for small and mid-size teams, with published prices and a free tier. A realistic entry point to exposure management without an enterprise budget.
Stage-coverage score: 4 of 10. Sum of the five 0-2 stage scores below; see the rubric for what each number means.
01Scoping□noneAgree what is in play
02Discovery◪partialFind every exposure, not just CVEs
03Prioritisation◪partialRank by attack path and impact
04Validation◪partialProve it is exploitable
05Mobilisation◪partialGet it fixed, and show it
Not a primary tool for any single stage. Contributes to: Discovery, Prioritisation, Validation, Mobilisation. Compiled from public vendor documentation.
Intruder is deliberately smaller in scope than the platforms above. Attack surface discovery and monitoring, external and internal scanning, cloud posture and container scanning cover the ground a team of two or three actually needs, without a deployment project.
Pricing is published, which is rare here: a base fee plus per-target licensing, with a permanent free plan launched in July 2026 covering a handful of web applications and one cloud account. For an organisation deciding whether exposure management is worth a budget line, that removes the first obstacle.
Prioritisation of scan output was the founding premise: results are filtered down to what is worth acting on rather than exported as a wall of findings, though there is no attack path or business-context scoring. Fifteen or more ticketing and workflow integrations cover mobilisation adequately.
Validation is limited. Remediation rescans confirm a fix worked, and an add-on artificial intelligence penetration testing service is available per test, but there is no breach and attack simulation or control efficacy testing.
Check in a demo: whether the free or entry tier covers enough of your real asset count to be a genuine starting point, and what the per-target charges look like at your full scope.
Weak in one of these stages? The self-assessment tells you which stage to shop for first, and the directory shows who covers it.
Claim or correct this listing
Tell us what is wrong or what you want to confirm, and link a public source we can check. The owner reviews every claim. Nothing changes on the site until it has been reviewed, and a claim never changes a score or placement.
Get vendor updates monthly
One email a month: what changed in exposure management, which vendors moved, and one thing worth doing. No spam, unsubscribe any time.