# Continuous Threat Exposure Management (CTEM) Program

> Scoped per engagement · Offensive Security · https://cisomarketplace.services/services/continuous-threat-exposure-management-ctem-program

A packaged CTEM program: continuous attack-surface discovery, threat-led validation (incl. pen test/red team), exposure prioritization, and measurable remediation — replacing point-in-time vuln scanning.

## In scope

- Continuous attack surface discovery
- Threat-led validation (pentest/red team)
- Exposure scoping & prioritization
- Remediation tracking & metrics
- Continuous re-validation

## Deliverables

- CTEM program plan
- Exposure dashboard
- Prioritized remediation backlog
- Validation reports

## Tiers

### Essential: scoped

Core CTEM cycle (discover + validate + prioritize)

Limits: devices 1000

Excludes:
- Monthly validation

### Advanced: scoped

Up to 5,000 assets with monthly validation.

Limits: devices 5000, months 12

Includes:
- Monthly validation
- Remediation tracking

Excludes:
- 24/7 monitoring

### Enterprise: scoped

Up to 25,000 assets across business units, with an embedded program lead.

Limits: devices 25000, months 12

Includes:
- Embedded program lead
- Executive exposure reporting

Excludes:
- Managed detection and response

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=continuous-threat-exposure-management-ctem-program