Exposure management built into the Defender portal, drawing on whatever Microsoft security products you already license. Strong scoping and attack paths; no native adversarial validation.
This is likely the lowest-cost route to an exposure platform for an organisation already standardised on Microsoft security, because it arrives with licences you hold rather than as a new purchase. It runs inside the Defender portal with nothing to install, and became generally available in November 2024.
Scoping is among the strongest in this directory. Critical asset management ships predefined classifiers for devices, identities, cloud resources, software as a service applications and artificial intelligence agents, plus custom query-based rules and criticality levels, so crown jewels are a maintained data set rather than a spreadsheet.
Discovery is aggregation, not native scanning. The enterprise exposure graph pulls from Defender for Endpoint, Vulnerability Management, Identity, Cloud and Cloud Apps, plus preview connectors to Tenable, Qualys, Rapid7, Wiz, Palo Alto Prisma, ServiceNow and operational technology tools including Armis, Dragos and Forescout. Coverage therefore tracks exactly which Microsoft products you own, and the non-Microsoft connectors move to consumption-based pricing after preview.
Prioritisation through attack paths, choke points and blast radius is genuinely good, including hybrid on-premises to cloud paths. Validation is not native: Microsoft's own material describes it as visualising and querying attack vectors, with active reachability scans for cloud paths, and there is no simulation module.
Check in a demo: data latency, which the documentation puts at up to 72 hours, and the retention model, since only the latest snapshot is kept. Also confirm availability, because it is not offered in sovereign or government clouds.
Weak in one of these stages? The self-assessment tells you which stage to shop for first, and the directory shows who covers it.
Claim or correct this listing
Tell us what is wrong or what you want to confirm, and link a public source we can check. The owner reviews every claim. Nothing changes on the site until it has been reviewed, and a claim never changes a score or placement.
Get vendor updates monthly
One email a month: what changed in exposure management, which vendors moved, and one thing worth doing. No spam, unsubscribe any time.