Glasstrail
External attack surface management that shows you vulnerabilities the way adversaries see them
About Glasstrail
Glasstrail is an external attack surface management (EASM) platform that continuously scans and monitors your organization's digital footprint to uncover cybersecurity vulnerabilities. The agentless solution discovers exposed assets across email, credentials, websites, DNS, and cloud services, then prioritizes findings with clear, plain-language explanations. Powered by AI analysis and CVE detection, Glasstrail helps security teams remediate high-impact issues before attackers can exploit them. Setup takes approximately two minutes with no software installation required.
Pros & Cons
Pros
- Quick 2-minute setup with no agent installation
- AI-powered contextual analysis explains why findings matter
- Continuous monitoring catches new vulnerabilities automatically
- CVE detection against comprehensive CVE.org database
- Unlimited users on all plans
- 14-day free trial with full features
Cons
- Starter plan limited to monthly scans only
- Only 2 root domains on Starter tier
- Microsoft SSO requires Standard plan or higher
- MSP plans needed for multi-organization management
- No on-premise deployment option
Key Features
External Attack Surface Discovery
Automatically discovers and maps all external-facing digital assets including websites, DNS, email, and cloud services
CVE Detection
Checks website technologies against the CVE.org database to identify software with known vulnerabilities
AI-Powered Analysis
Why Should I Care feature provides contextual, plain-language explanations of each finding's impact
Agentless Scanning
No software installation required — set up in approximately 2 minutes by entering your domain
Continuous Monitoring
Ongoing risk assessment with alerts integrated into existing security tools
Remediation Prioritization
Ranks findings by severity with actionable guidance to address high-impact issues first
Credential Exposure Detection
Identifies exposed account credentials across the external attack surface
Multi-Organization Management
MSP and consultant plans support managing multiple client organizations from one dashboard
Ticketing Integrations
Connects with existing ticketing systems to streamline remediation workflows
Third-Party Risk Management
Assess and monitor the security posture of vendors and partners
Pricing
- All data feeds with monthly scans
- 2 root domains with automatic subdomain discovery
- Risk and inventory dashboards
- Unlimited users
- 1 ad-hoc scan per week
- All data feeds with weekly scans
- 50 root domains with automatic subdomain discovery
- Unlimited users with Microsoft SSO
- External user collaboration
- Ticketing integrations
- 1 ad-hoc scan per week
- All data feeds with ad-hoc scanning
- Unlimited users with Microsoft logins
- Customer collaboration features
- Up to 5 ad-hoc scans per week
- Up to 5 separate organizations
- All Standard MSP features
- Up to 10 ad-hoc scans per week
- Up to 10 separate organizations