What tools/services do you use for CTEM (continuous threat exposure management)?

Outsourcing & Managed ServicesThreat Intelligence & Incident Response
858 viewscircle icon3 Comments
Sort by:
CISO in Manufacturing2 months ago

We use several CTEM tools, but Ionix is our main platform. It quickly discovers assets, validates findings and ranks risks, helping us prioritize remediation.

VP & CISO in Healthcare and Biotech2 months ago

Might not be what you define as CTEM, but we use BitSight for monitoring our external attack surface.  It finds assets we might not see with scanners.  Qualys has a module called Threat Protect that is good for surfacing what to work on.

Lightbulb on1
CISO in IT Services3 months ago

Our core CTEM solution is Microsoft Defender for Endpoint, specifically the Threat and Vulnerability Management feature known as Exposure Management. It provides continuous visibility, prioritization, and remediation across our environment.

Content you might like

How are you diversifying threat intelligence sources? Have you been able to reduce reliance on CISA for TI?

What’s your organization doing to protect against risks related to disinformation? How are you approaching this & which business unit leaders are currently involved?

What’s your reaction to 23andMe blaming users for their data being breached?

Worst. PR move. EVER.20%

23andMe should own responsibility44%

Implement MFA instead of pointing fingers…45%

23andMe told the hard truth - it is the users’ fault.32%

Inadequate security controls are to blame18%

Lack of regulation is to blame6%

Other (explain in a comment)4%

View Results

A CISO would be most effective if they reported directly into...?

Board10%

CEO39%

CIO41%

CTO6%

What CISO?1%

View Results

Disesdi Susanna Cox outlines 3 critical threats:
1. Non-deterministic decisions – same prompt, different actions (e.g., unintended transfers).
2. Cascading failures – multi-step tasks = more attack surface.
3. Emergent behavior – guardrails can’t cover infinite edge cases; focus on blast radius and recovery.

3 Controls to Implement Now: 
• Map agent workflows to attack tactics (MITRE ATLAS)
• Weekly prompt-injection tests (OWASP + CSA)
• Least-privilege, expiring agent tokens (NIST AI RMF + CSA MAESTRO)

Which control or framework gives you the biggest headache, and how are you tackling it?

Full analysis: https://disesdi.substack.com/p/openai-just-dropped-their-agentic

What tools/services do you use for CTEM (continuous threat exposure management)? | Gartner Peer Community