Assetnote
Assetnote is an Australian cybersecurity company providing a cloud-based External Attack Surface Management platform that continuously discovers and monitors enterprise digital assets hourly. It serves enterprise CISOs and security teams with integrated offensive security research, enabling vulnerability detection before vendor disclosures.
- Company typePrivate
- Founded2018
- HeadquartersBrisbane, Australia
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Assetnote does
Assetnote is an Australian cybersecurity company, founded in 2018 and headquartered in Brisbane, that provides a cloud-based External Attack Surface Management (EASM) platform for enterprise security teams. The platform continuously discovers, enriches, and monitors an organization's external digital assets on an hourly cadence, mapping cloud assets, technology stacks, services, and ephemeral assets from a single seed domain. Core platform modules include Continuous Asset Discovery, Deep Asset Enrichment, the Assetnote Exposure Engine (real-time exposure detection with proof-of-concept verification), Expert Security Research, Collaborative Workflows, and Customization.
The company's principal differentiator is its integrated offensive security research team, which discovers 0-Day vulnerabilities in widely used enterprise products (Zoom, Citrix, Metabase, cPanel, IBM Aspera, Progress WhatsUp Gold, Sitecore, Oracle Opera) and operationalizes findings directly into the platform. This research-led approach enables customers to receive verified exposure alerts with proof-of-concept for every finding and to remediate vulnerabilities before vendor patches are released. Assetnote also maintains Assetnote Labs, an open-source initiative distributing Commonspeak2, Kiterunner, and Assetnote Wordlists to the security community.
Assetnote operates a quote-based enterprise SaaS subscription model, selling exclusively through direct enterprise sales with "Request a Demo" CTAs and targeting CISOs and security leaders. Named customers include LinkTree, Yuga, Immutable, an unnamed Fortune 500 technology company, and Network Appliances. In January 2025, Assetnote was acquired by Searchlight Cyber, with backing from Eterna Growth Partners and subsequent investment from Charlesbank Capital Partners; co-founder Michael Gianarakis was appointed CEO of Searchlight Cyber in February 2026.
Assetnote firmographics
Firmographics- Name
- Assetnote
- Legal name
- Assetnote Pty Ltd
- Website
- https://assetnote.io
- Company type
- Private
- Founded year
- 2018
- Operating status
- Acquired
- Headcount range
- 11–50 employees
- Short description
- Assetnote is an Australian cybersecurity company providing a cloud-based External Attack Surface Management platform that continuously discovers and monitors enterprise digital assets hourly. It serves enterprise CISOs and security teams with integrated offensive security research, enabling vulnerability detection before vendor disclosures.
- Ownership category
- akta.pro rank
Assetnote industry classification
Industry- Product category
- Cybersecurity Software
- NAICS
- Security Systems Services (except Locksmiths) (561621)
- akta.pro primary industry
- Attack Surface Management (EASM/CAASM) (HDADAHAC)
Keywords
Where Assetnote is headquartered
LocationHeadquarters
- HQ city
- Brisbane
- HQ country
- Australia
- HQ region
- Oceania
Offices1 record
Markets served
Assetnote business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- ASM Platform Subscription: Enterprise SaaS subscription model for Attack Surface Management platform access. Pricing is quote-based and not publicly disclosed, indicating a direct sales motion with enterprise contracts. The platform is offered as a continuous service with features including asset discovery, enrichment, and exposure monitoring.
Go-to-market motion1 record
Distribution channels1 record
Marketing channels7 records
Assetnote product offering
Product offeringCore offering
Assetnote provides a cloud-based External Attack Surface Management (EASM) platform that continuously discovers, enriches, and monitors an organization's external digital assets. The platform combines automated reconnaissance, hourly scanning, deep technology fingerprinting, and proprietary offensive security research to identify verified exploitable exposures with proof-of-concept before attackers can leverage them.
Product overview
Assetnote offers a unified External Attack Surface Management (ASM) platform that combines continuous asset discovery, deep asset enrichment, real-time exposure detection, and expert security research into a single product. The core Assetnote ASM Platform includes platform modules for Continuous Asset Discovery, Deep Asset Enrichment, the Assetnote Exposure Engine, Expert Security Research, Collaborative Workflows, and Customization. The platform scans assets every hour and provides proof-of-concept verification for every finding. Beyond the commercial platform, Assetnote maintains Assetnote Labs as an open-source research initiative offering tools like Commonspeak2 (evolutionary wordlists), Kiterunner (contextual content discovery), and shared wordlists. Additionally, ASM Roles is a specialized job board for Attack Surface Management professionals.
Differentiator
Problem solved
Functional benefit
Brands
- Assetnote Exposure Engine: Advanced exposure detection platform that provides high signal, real-time and continuous security monitoring of assets
- Assetnote Labs
- ASM Roles
Products and services
- Assetnote External Attack Surface Management Platform
Quantifiable outcome
- Customers patch vulnerabilities months before vendor disclosures or CVE advisories are released
- +2 more outcomes
Companies that use Assetnote
Customer profileNamed customers5 records
Segments3 records
Ideal customer profiles2 records
Assetnote technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
Assetnote partnerships and signals
Strategic signalScale indicators3 records
Recent moves7 records
Expansion highlights6 records
Assetnote competitors and assessment
Company assessmentDirect peers
- CyCognito: CyCognito is a direct EASM competitor offering continuous external attack surface discovery and risk prioritization for enterprise security teams, overlapping directly with Assetnote's core platform on discovery, asset enrichment, and exposure monitoring use cases.
- Censys: Censys operates an internet-wide scanning and attack surface management platform with continuous asset discovery and risk evaluation, serving the same CISO/Security-Team buyer as Assetnote with a data-set-led approach to ASM.
- Shodan: Shodan provides internet-wide asset intelligence and a paid Shodan Monitor service for EASM, competing with Assetnote on continuous asset discovery and exposure monitoring for technical buyers.
Broad incumbents
- Tenable (Tenable Attack Surface Management): Tenable bundles exposure management (Tenable.asm, Tenable One, Nessus) for enterprise customers and competes head-on in the EASM category with the advantage of a much larger incumbent platform and broader vulnerability management portfolio.
- CrowdStrike (Falcon Surface): CrowdStrike Falcon Surface delivers EASM capability as part of the broader Falcon platform, leveraging its endpoint and SIEM installed base to compete with Assetnote on enterprise attack surface visibility.
- Microsoft Defender External Attack Surface Management: Microsoft's EASM service, integrated into the Defender and Azure security portfolio, competes with Assetnote especially among Microsoft-heavy enterprise customers where bundle economics favor Microsoft.
- Wiz: Wiz started in cloud security posture management and has expanded into external attack surface and exposure management, competing with Assetnote for the cloud-first enterprise CISO buyer.
- Bitsight: Bitsight is an established security ratings and external attack surface player with continuous monitoring capabilities overlapping Assetnote's enterprise customer base and platform scope.
- RiskRecon (Mastercard): RiskRecon, now part of Mastercard, delivers continuous external attack surface monitoring and cyber risk ratings for enterprises, competing with Assetnote in third-party and M&A use cases.
Emerging players
- Axonius: Axonius is a cyber asset attack surface management (CAASM) and SaaS security platform that overlaps with Assetnote's asset-centric discovery and enrichment capabilities, targeting overlapping enterprise security buyer personas.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Assetnote social profiles
Digital presenceAssetnote financial estimates
Financial estimateRevenue estimate
Valuation estimate
Assetnote leadership team
Management profileNumber of profiles
Profiles3 records
Assetnote funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Assetnote M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Assetnote
What does Assetnote do?
Assetnote provides a cloud-based External Attack Surface Management (EASM) platform that continuously discovers, enriches, and monitors an organization's external digital assets. The platform combines automated reconnaissance, hourly scanning, deep technology fingerprinting, and proprietary offensive security research to identify verified exploitable exposures with proof-of-concept before attackers can leverage them.
Is Assetnote a public or private company?
Assetnote is a private company. It is classified as corporate owned and is currently acquired.
When was Assetnote founded?
Assetnote was founded in 2018. It employs 11 to 50 people.
Where is Assetnote based?
Assetnote is headquartered in Brisbane, Australia, in the Oceania region.
How does Assetnote make money?
One revenue line is on record: ASM Platform Subscription.
Who are Assetnote's main competitors?
Direct peers on record are CyCognito, Censys and Shodan. Broad incumbents are Tenable (Tenable Attack Surface Management), CrowdStrike (Falcon Surface), Microsoft Defender External Attack Surface Management, Wiz, Bitsight and RiskRecon (Mastercard). Axonius is listed as an emerging player.
Does Assetnote have an API?
Yes. Assetnote offers an API for integrations and custom capabilities. The platform features "Rich Integrations and API" enabling powerful standard and custom capabilities. No specific API documentation URL, endpoint specifications, or authentication details are provided in the source material.
What industry is Assetnote in?
Assetnote's product category is Cybersecurity Software. Its primary akta.pro industry code is HDADAHAC, Attack Surface Management (EASM/CAASM). Its NAICS code is 561621.