Number of Seats/Users: Attack Surface offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Attack Surface that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Attack Surface. Attack Surface reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Attack Surface offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Attack Surface. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Attack Surface often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Hello! As a Spendbase discount specialist, I’ve gathered some insights from our clients about Attack Surface, the cyber risk management software. Here’s what we’ve found:

Key Strengths:

• Comprehensive Asset Discovery: Clients appreciate Attack Surface’s ability to identify a wide range of digital assets, including IT, OT, and IoT devices. This comprehensive visibility is crucial for effective risk management.

• Continuous Monitoring: The software’s continuous monitoring feature allows organizations to stay updated on their security posture, promptly detecting and addressing vulnerabilities as they arise.

• Integration Capabilities: Attack Surface integrates seamlessly with various third-party security tools, enhancing its functionality and providing a unified approach to cyber risk management.

• User-Friendly Interface: The intuitive design of the platform makes it accessible for users of varying technical expertise, facilitating efficient navigation and operation.

Areas for Improvement:

• Complex Licensing Model: Some clients have noted that the licensing structure can be intricate, potentially leading to confusion during the purchasing process.

• Limited Third-Party Risk Monitoring: While the software excels in internal asset management, it currently lacks robust capabilities for monitoring third-party risks, which are increasingly relevant in today’s interconnected digital landscape.

• Language Support: The threat intelligence collection is primarily in English, which may pose challenges for non-English speaking users seeking localized threat information.

• Social Media Exposure Analysis: Clients have expressed a desire for features that analyze social media exposures, an area not currently covered by the software.

Client Feedback Highlights:

• One client from the government sector mentioned that Attack Surface significantly improved their asset inventory and event response capabilities, especially in a highly distributed environment with diverse technology needs.

• Another client praised the software’s asset discovery capabilities, highlighting its ease of deployment, accuracy, and speed in scanning, as well as its ability to map entire networks without requiring credentials.

In summary, our internal data shows that Attack Surface is highly regarded for its comprehensive asset discovery, continuous monitoring, and integration capabilities. However, there are opportunities for enhancement in areas such as licensing simplicity, third-party risk monitoring, language support, and social media exposure analysis. Addressing these aspects could further solidify its position as a leading cyber risk management solution.