CTM360
Brand protection software
Threat intelligence software
DMARC software
Vendor security and privacy assessment software
Attack surface management software
Exposure management platforms
Dark web monitoring tools
Fraud detection software
System security software
Digital risk protection (DRP) platforms
Confidentiality software
Risk assessment software
Vulnerability management software
Web security software
E-commerce software
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if CTM360 and its alternatives fit your requirements.
$300 per year
Free Trial unavailable
Free version
Small
Medium
Large
-
What is CTM360
CTM360 is a digital risk protection platform that helps organizations identify and respond to external threats such as brand impersonation, phishing, leaked credentials, and exposed internet-facing assets. It is used by security, fraud, and brand protection teams to monitor the open web, social platforms, app stores, and dark web sources and to support takedown and remediation workflows. The product combines external threat intelligence, attack surface discovery, and brand abuse monitoring in a single service-oriented platform.
Broad external threat coverage
CTM360 supports use cases that span brand abuse, phishing detection, dark web monitoring, and internet-facing asset discovery. This breadth can reduce the need to run separate tools for brand protection and external threat intelligence. It is suited to organizations that want a consolidated view of digital risk across multiple external channels.
Takedown and response workflows
The platform is positioned around operational response, including investigation and takedown support for malicious domains, pages, and impersonation content. This helps teams move from detection to remediation without relying solely on ad hoc processes. It is particularly relevant for brand protection and fraud teams that need repeatable case handling.
Attack surface discovery alignment
CTM360 includes capabilities aligned with attack surface management by identifying and tracking exposed external assets and related risks. This can complement internal vulnerability management by focusing on what is visible and exploitable from the outside. It supports prioritization by tying findings to externally observed threats and abuse patterns.
Vendor details hard to verify
Publicly verifiable corporate details (such as definitive founding year and headquarters) are not consistently available across authoritative sources. This can complicate due diligence for procurement and third-party risk reviews. Buyers may need to rely on vendor-provided documentation and contractual attestations.
Opaque data source transparency
As with many DRP offerings, the specific collection sources, coverage depth, and refresh rates for certain channels may not be fully transparent in public materials. This makes it harder to benchmark detection efficacy against other products in the same space. Proof-of-value testing is typically required to validate coverage for a buyer’s threat profile.
Not a full VM replacement
While it supports external exposure discovery, it does not replace internal vulnerability management, endpoint security, or full enterprise risk assessment tooling. Organizations with mature security programs may still need separate tools for internal scanning, patch workflow integration, and control validation. Integration effort may be required to align findings with existing SOC and GRC processes.
Plan & Pricing
CTM360 — Official pricing (from ctm360.com/pricing)
Community Edition (Free)
| Plan | Price | Key features & notes |
|---|---|---|
| Community Edition | FREE | "FREE – ideal for SMEs" per pricing page; restricted feature set (limited assets, limited visibility, 1 user, monthly data refresh). "Try Community Edition for Free" CTA present. |
External Attack Surface Management (HackerView) — Tiered
| Plan | Price | Key features & notes |
|---|---|---|
| Restricted | $5,000 /yr+ | Data refresh: Fortnightly; limited features; Request Proposal CTA. |
| Basic | $10,000 /yr+ | Data refresh: Fortnightly; more features than Restricted; Request Proposal CTA. |
| Advanced | $25,000 /yr+ | Data refresh: Weekly; popular tier. |
| Enterprise | $50,000 /yr+ | Real-time (up to 48 hrs) data refresh; enterprise-level features; Request Proposal. |
Digital Risk Protection / Brand & Phishing Protection (CyberBlindspot and Brand Protection tiers)
| Plan | Price | Key features & notes |
|---|---|---|
| Phishing Protection (Basic use cases) | $15,000 /yr+ | Surface, deep & dark web monitoring; limited takedowns; Request Proposal. |
| Phishing + Social Media Protection | $25,000 /yr+ | Adds social media brand use cases. |
| Brand Protection (includes VIP protection) | $35,000 /yr+ | Broader brand protection use cases; managed takedowns, etc. |
| Advanced (Brand + Data Leakage) | $42,500 /yr+ | Adds data leakage and advanced detection. |
| Enterprise (All use cases) | $67,500 /yr+ | Full coverage across all use cases; Request Proposal. |
Third-Party Risk Management (RiskHub / TPRM)
| Plan | Price | Key features & notes |
|---|---|---|
| Basic (Orgs monitored: 50) | $15,000 /yr+ | Third-party visibility, basic reporting, 5 users shown in feature matrix. |
| Advanced (Orgs monitored: 150) | $35,000 /yr+ | Automated third-party detection, expanded reporting. |
| Enterprise (Orgs monitored: 250) | $55,000 /yr+ | Enterprise scale; Request Proposal. |
DMARC360 (DMARC compliance / reporting)
| Plan | Price | Key features & notes |
|---|---|---|
| Restricted | $300 /yr+ | Email sending domains: 1; monthly email volume: 5,000; limited data visibility window (1 month); Request Proposal. |
| Basic | $2,000 /yr+ | Email sending domains: 2; monthly volume: 100,000; 3 months visibility. |
| Advanced | $4,500 /yr+ | Email sending domains: 5; monthly volume: 1,000,000; 6 months visibility. |
| Enterprise | $8,000 /yr+ | Email sending domains: 12+; unlimited volume/visibility; Request Proposal. |
Other notes from official pricing page:
- "Simplified All-in-One Pricing" available via "Request Proposal" (custom pricing).
- Multiple "Starts at" amounts are presented as "/yr+" (indicating starting annual price; further customization likely required and price may increase).
- Managed takedown credits and user/support/onboarding levels vary by tier (see feature comparison on pricing page).
