Continuous Threat Exposure Management

Vulnerability management scans known assets for known vulnerabilities. CTEM is a broader programme: it continuously discovers what you actually have exposed (including assets you did not know about), assesses it across infrastructure, applications, cloud, brand, and credentials, prioritises what it finds using business context, and validates that findings are real before your team acts. Vulnerability management is one module within Sentry CTEM.

No. Penetration testing provides expert-led exploitation depth at a point in time; Sentry CTEM provides continuous breadth, prioritisation, and validation between tests. They are complementary: CTEM findings directly inform pentest scoping, and many clients use both.

Yes. Vulnerability management (Sentry CVM), attack surface management (Sentry ASM), domain monitoring, and breach & credential monitoring are each available standalone, and all run on the Sentry platform, so you can start narrow and expand to the full CTEM programme without re-onboarding.

Every finding is automatically assessed for confidence (is it likely real?), re-ranked for severity using real-world context (exposure, exploitability, asset role), given a contextual risk narrative specific to your environment, and paired with practical remediation guidance. Findings that need human confirmation are flagged, and on managed tiers Blackfoot analysts follow these up and suppress verified false positives before they reach you.

Microsoft Azure, Microsoft 365, Amazon Web Services, Google Cloud Platform, and Oracle Cloud Infrastructure, using read-only API access, no agents or network connectivity to your cloud environment required.

Typically three to four weeks from contract signature to a full baseline: discovered asset inventory, first scan results across your subscribed domains, and monitoring baselines, with a guided walkthrough in Sentry.

Attack path analysis correlates findings from across the service into chains showing how an attacker could move from an internet-facing entry point to the assets that matter most to your business, with each step backed by evidence. It produces an attack path diagram and prioritised remediation guidance, including which single fix removes the most risk. This capability is in development and will be introduced to Sentry CTEM subscriptions as it becomes available.