Attack Surface Ranked

NEWS · UPDATED SEPTEMBER 2026

Attack surface management news

Summaries of public announcements, with links to the original source. Updated monthly.

Quick answer

The three most recent items: watchTowr says it is named in a Gartner Emerging Tech Impact Radar report (23 September 2026), Censys expanded its channel partner program (22 September) and Tenable is bringing Claude Mythos 5 into Tenable One (8 September). Each item is a vendor or standards-body announcement summarized in our words; we have not tested the capabilities described.

For a themed summary of these items, see ASM vendor announcements in 2026, grouped by theme.

Showing 14 of 14

  • watchTowr

    watchTowr named a Sample Vendor in a Gartner Emerging Tech Impact Radar report

    watchTowr says it is listed as a Sample Vendor for Preemptive Exposure Management, its own category term, in Gartner's 2026 Emerging Tech Impact Radar: Preemptive Cybersecurity report.

    Source: watchTowr

  • Censys

    Censys expands its global channel partner program

    Censys announced a unified framework for distributors and resellers, early access to its product roadmap and a Partner Summit. It said partner-sourced bookings grew 186% year over year in the first half of 2026.

    Source: Censys newsroom

  • Tenable

    Tenable brings Anthropic's Claude Mythos 5 into Tenable One

    Tenable said it is integrating Claude Mythos 5 into the Tenable One Exposure Management Platform. The first capability is Tenable One Adversary View, aimed at finding attack paths and choosing remediation.

    Source: Tenable press release

  • IONIX

    IONIX launches WAF Posture Management

    IONIX introduced WAF Posture Management, which it describes as continuous, evidence-based WAF validation that finds unprotected assets, checks enforcement status and detects configuration drift across WAF deployments.

    Source: IONIX blog

  • Tenable

    Tenable extends exposure management coverage to more AI platforms

    Tenable added Google Gemini coverage alongside Claude, ChatGPT Enterprise and Copilot, and extended visibility to Model Context Protocol deployments and AI-native developer tools.

    Source: Tenable press release

  • IONIX

    IONIX joins the Akamai Technology Partner Program

    IONIX joined Akamai's Technology Partner Program, pairing its external attack surface discovery and exploitability validation with Akamai's edge web application protection.

    Source: IONIX press release

  • watchTowr

    watchTowr introduces Project Red for autonomous vulnerability reproduction

    watchTowr launched Project Red, which reproduces newly disclosed vulnerabilities to validate client exposure. It says Project Red reproduced CVE-2026-63030 in 22 minutes.

    Source: watchTowr

  • Censys

    Censys reports first-half 2026 growth figures

    Censys reported 400% year-over-year growth in customers above $1 million in annual recurring revenue and 115% growth in Censys Platform customers, and said it expanded into the Middle East and Japan.

    Source: Censys newsroom

  • Censys

    Censys adds DNS intelligence to its Internet Map

    Censys added real-time DNS visibility to its Internet Map, bringing domains, DNS records, IPs, hosts, services and certificates into a single view.

    Source: Censys newsroom

  • CyCognito

    CyCognito adds Continuous AI Pentesting

    CyCognito unveiled Continuous AI Pentesting, which runs AI-driven offensive testing continuously across the external attack surface through its Target Graph architecture.

    Source: CyCognito press release

  • Field

    FIRST raises its 2026 CVE forecast to about 66,000

    FIRST's mid-year forecast projects approximately 66,000 CVEs in 2026, up from the median of 59,427 it forecast in February.

    Source: FIRST

  • IONIX

    IONIX ships Live Exposure Defense

    IONIX released Live Exposure Defense, which it says correlates each newly published CVE with a customer's internet-facing assets, confirms exploitability through safe active testing and delivers a mitigation workflow within 12 hours.

    Source: IONIX blog

  • Rapid7

    Rapid7 adds runtime validation and DSPM to Exposure Command

    Rapid7 announced runtime validation and data security posture management for Exposure Command, aimed at showing which cloud vulnerabilities are exploitable and which sensitive data they put at risk.

    Source: Rapid7 press release

  • Field

    FIRST forecasts a median of 59,427 CVEs for 2026

    FIRST's 2026 Vulnerability Report projects a median of approximately 59,427 CVEs for the year, with a 90% confidence interval of 30,012 to 117,673.

    Source: FIRST

Inclusion here does not affect scores. Scores reflect vendor documentation reviewed in September 2026; see How we score.