# Continuous Attack Surface Monitoring

> From $8K / mo · Compliance & GRC · https://cisomarketplace.services/services/continuous-attack-surface-monitoring

Comprehensive continuous monitoring of your external attack surface with regular assessments and testing.

## In scope

- External attack surface
- Vulnerability management
- Penetration testing

## Deliverables

- Weekly external scan reports
- Monthly vulnerability assessment reports
- Quarterly penetration test findings

## Tiers

### Basic: $8K / month

Monthly subscription covering up to 100 external IPs and up to 5 root domains: weekly external scans with a report each week, and a monthly analyst-reviewed vulnerability assessment report with prioritized fixes. No penetration testing.

Limits: external ips 100, domains 5

Includes:
- Weekly external scan reports
- Monthly analyst-reviewed vulnerability assessment report
- Asset and subdomain discovery for up to 5 root domains
- Prioritized remediation list each month

Excludes:
- Quarterly penetration tests
- Internal network or authenticated application testing
- Remediation of findings
- 24/7 alerting or incident response

### Premium: $15K / month

Monthly subscription covering up to 250 external IPs and up to 15 root domains: weekly scans, monthly vulnerability assessment reports, plus a manual external penetration test every quarter (4 per year) with a findings report and one retest of fixed findings per test.

Limits: external ips 250, domains 15

Includes:
- Weekly external scan reports
- Monthly analyst-reviewed vulnerability assessment report
- Quarterly manual external penetration test (4 per year)
- Penetration test findings report each quarter
- One retest of fixed findings per quarterly test

Excludes:
- Internal network testing
- Authenticated web application or API testing
- Social engineering
- Remediation of findings

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=continuous-attack-surface-monitoring