- BFSIBanking, Financial Services & Insurance
- IT & ITESIT services, BPM, GCCs & SaaS
- Retail & e-commerceStore chains, D2C brands & marketplaces
- HealthcareComing soon
- ManufacturingComing soon
Aquila I Attack Surface Monitoring
Somebody stood up a test server two years ago. It is still online, and an attacker can find it — Aquila I ASM keeps discovering what your organisation exposes to the internet — domains, DNS, ports, services, cloud workloads and certificates — and flags the shadow IT, forgotten assets and new exposures an attacker would find first.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Aquila I platform family
This page covers Aquila I Attack Surface Monitoring — your own internet-facing assets. The rest of the platform:
Quick facts
30-second orientation- Product
- External attack surface monitoring: asset discovery, exposure checks, uptime and certificate monitoring
- Maker
- Aquila I Solutions Pvt. Ltd., Thane (Mumbai Metropolitan Region); founded 2020; no outside funding reported (Tracxn)
- Platform
- The telemetry layer of Aquila I’s platform beside Digital Risk Protection; it feeds CTEM discovery
- Price
- Quote-only; no published price, no INR list and no public licence meter
- Deployment
- Agentless, outside-in SaaS by Aquila I’s account; no on-premises option is documented
- Checks
- CVE, CWE and CISA KEV; web and website checks; DNS; AWS, Azure and GCP; uptime and SSL
- Customers
- Aquila I publishes no named customer case studies; the ASM datasheet dates from October 2025
- Analysts
- No analyst placement for Aquila I or for this product; no third-party evaluation has been published
- India
- Indian-built, but the SaaS hosting region is not published; India origin is not data residency
- In India via
- TechBag — scoping, the hosting region in writing, a quote in INR with GST, pilot support
Understand attack surface monitoring before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is attack surface monitoring?
It keeps finding what you expose to the internet and flags what is new, risky or forgotten.
An asset spreadsheet and a yearly scan vs Aquila I ASM — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | An asset spreadsheet and a yearly scan | Aquila I Attack Surface Monitoring |
|---|---|---|
| Asset inventory | A spreadsheet updated before each audit | Continuous discovery of internet-facing assets |
| Forgotten assets | Found by an attacker first | Shadow IT and orphaned subdomains flagged |
| Certificates and uptime | Separate tools, or a missed renewal | Expiry and availability on the same dashboards |
| Third-party VAPT | PDF reports filed and forgotten | Imported beside its own findings in one view |
| Change | Noticed at the next scan window | Alerts on new exposures and drift, with diffs |
| What it is NOT | — | Dark-web monitoring, a fixer or a published price |
The cheapest test is a comparison: let discovery run for two weeks and count the assets it finds that nobody on your team had listed.
The four pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Discovery
Public-facing servers, cloud workloads, domains, subdomains, DNS records, open ports and services are discovered and catalogued from the outside, with no agents.
Scanning
Aquila I lists intrusive and non-intrusive infrastructure scanning, classifying findings against CVE, CWE and CISA KEV, plus web and website checks.
Dashboards
Domain security, IP vulnerability, web vulnerability and uptime dashboards show each exposure with a risk score, geolocation and a remediation priority.
Platform
Aquila I places ASM and digital risk in the telemetry layer above its lakehouse, and maps ASM to the scoping and discovery stages of its CTEM programme.
Outside-in discovery, scanning and alerting on your internet edge — findings scored and kept in Aquila I’s platform.
Nine capabilities. Discover, assess, alert.
Aquila I ASM shows you the internet-facing estate an attacker would map first — and keeps watching it as it changes.
Shadow IT and forgotten assets
Catalogues open ports, orphaned subdomains, shadow IT, forgotten staging servers and publicly accessible storage buckets.
DNS visibility
Watches DNS records, zone transfers and resolution paths for hijacking attempts, dangling CNAMEs and unauthorised zone changes.
AWS, Azure and GCP exposure
Looks at cloud-hosted assets across AWS, Azure and GCP for misconfigurations, public exposures and compliance drift.
CVE, CWE and CISA KEV
Scans infrastructure and classifies findings against CVE, CWE and the CISA Known Exploited Vulnerabilities list for reporting.
Web app and website checks
Assesses web apps for OWASP Top 10 flaws and websites for malware, defacement, blacklisting and SSL misconfiguration.
Third-party VAPT reports
Imports VAPT reports from other scanners and pen-test tools into one view, with unified risk scoring and trend analytics.
Context-rich change alerts
Alerts on new exposures and configuration drift with severity, the affected asset, historical change diffs and remediation steps.
Uptime and certificate watch
Probes web servers, APIs, mail exchangers and DNS resolvers from several locations, and tracks SSL certificate expiry too.
Remediation tracking
Assigns and tracks fixes with prioritised plans, SLA tracking and automated re-testing to confirm a gap is really closed.
Watch Aquila I InfraScan in action
Aquila I’s two-minute 2023 video on InfraScan, its earlier scanner for internet-exposed infrastructure. Aquila I does not say it is the same engine as today’s ASM.
Aquila I's InfraScan | Monitor Your Critical Infrastructure
Aquila I’s 2023 video on InfraScan, its scanner for internet-exposed infrastructure: history, not proof of today’s ASM engine.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Attackers map your internet edge before they touch it. Aquila I ASM maps it first.
Here’s what genuinely sets it apart — and exactly where it stops.
The attacker’s view of your estate
Many breaches start at something nobody remembered owning: a staging server, an orphaned subdomain, an expired certificate, an open storage bucket. Aquila I ASM keeps discovering what your organisation exposes to the internet, from domains and DNS records to ports, services and cloud workloads, and alerts when something new appears or drifts.
Scanning, uptime and VAPT in one console
Beyond discovery, Aquila I lists vulnerability assessment against CVE, CWE and CISA KEV, web and website checks, DNS visibility, and uptime and certificate monitoring on the same dashboards. It can also import VAPT reports from other scanners and testers, so third-party findings and its own sit in one risk view.
A discovery feed for a wider platform
ASM is the discovery feed for Aquila I’s CTEM programme, beside Digital Risk Protection, with CART and BAS to validate what it finds. For an Indian team that wants exposure discovery, external testing and SOC tooling from one local supplier, that joined-up design is the draw; each product is still bought and quoted separately.
Where it stops
It watches your own internet-facing assets, not your brand on the dark web (that is Digital Risk Protection), and it advises rather than fixes. Its findings are not a CERT-In-empanelled VAPT report. Pricing is quote-only, the hosting region and the asset meter are not published, and Aquila I names no ASM customers.
The numbers behind the platform
What your Aquila I ASM rollout looks like
List what you think you own
Collect your domains, IP ranges, cloud accounts and brands, so ASM’s findings can be compared with what IT believes exists.
Settle hosting and scan rules
Get the hosting region in writing and agree which assets may get intrusive scans and which only non-intrusive checks.
Run discovery and compare
Let discovery run, then compare its asset list with yours; every asset nobody claimed becomes a named owner’s task.
Import VAPT and tune alerts
Import your latest VAPT reports beside its findings, set alert thresholds, and agree remediation SLAs with each team.
Decide scope and add-ons
Settle the asset count for the contract, and decide whether CART or Digital Risk Protection belong beside it.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Within a week it listed two subdomains pointing at a decommissioned cloud service. Nobody on the team knew they existed.”
“Agentless, so setup was a list of domains and IP ranges, and the first findings arrived in the same week we signed.”
“Certificate-expiry and uptime alerts on the same screen as exposures saved us buying a second tool for the website.”
“Importing our last VAPT report beside its own findings gave the audit committee one view instead of two spreadsheets.”
“Discovery is good, but we had to ask twice how the asset count is priced, and the answer changed between two calls.”
“A useful exposure list, but the hosting region took weeks to confirm and the docs for our ticketing integration were thin.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the attack surface and exposure management market — tap any vendor to see why it sits where it does.
TechBag Attack Surface Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quote-only; young Indian vendor, no named customers.
Outside-in Discovery × Assessment Depth
The grid nobody publishes — how well a product finds assets from the outside with no agents or seed lists vs how deeply it then tests and scores them.
Agentless discovery; CVE, web, DNS, uptime and certificate checks.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Aquila I ASM vs the attack surface field
Against Arctic Wolf Aurora Attack Surface Management, Trend Vision One Cyber Risk Exposure Management, Tenable One, Qualys CSAM with EASM and CyCognito — on discovery, testing, web, cloud, scoring, fixes, uptime, price, India data and exit.
| Dimension | Aquila I Attack Surface Monitoring | Arctic Wolf Aurora Attack Surface Management | Trend Vision One Cyber Risk Exposure Management | Tenable One | Qualys CSAM with EASM | CyCognito |
|---|---|---|---|---|---|---|
| What it is | External asset watch | Asset aggregation layer | Vision One risk layer | Exposure platform | Inventory plus EASM | Attacker-view ASM |
| How assets are found | Outside-in, agentless | From your own tools | Sensors plus external | Scanners, agents, EASM | Agents plus EASM | Seedless discovery |
| Vulnerability testing | CVE, CWE, CISA KEV | Not a scanner | Risk, not scanning | Nessus depth | VMDR underneath | Active testing |
| Web applications | Listed; depth unclear | No | Not documented | Web in the platform | WAS on same inventory | Exposed web assets |
| Cloud | AWS, Azure, GCP | Not documented | Cloud accounts metered | Cloud in scope | TotalCloud separate | Exposed cloud assets |
| Prioritisation | Risk-scored context | Ranked with context | Quantified risk index | Exposure scores | TruRisk score | Exploit intelligence |
| Remediation | Tracked, advisory | Advisory | Guided mitigation | Reports, no patching | Patch via Qualys | Guidance, not fixes |
| Regulator-ready report | Not a VAPT report | Not a VAPT report | Board risk reporting | Evidence, not VAPT | Evidence, not VAPT | Evidence, not VAPT |
| Uptime and certificates | Uptime and SSL built in | Not in scope | Not documented | Not documented | Not on TechBag’s page | Not documented |
| Pricing model | Quote only | Quote only | Vision One credits | Platform licence | Per asset, quoted | Quote only |
| Published entry price | Not published | Not published | Credit rates published | ~$50k/yr reported | Not published | Not published |
| India data region | Not published | Outside India | Not documented | Mumbai site for VM | India platform | Not documented |
| Lock-in and exit | Inventory export unclear | Tied to Aurora | Tied to Vision One | Several products at once | Shared inventory | Nothing installed |
| Best fit | Indian mid-market edge | Arctic Wolf estates | Vision One estates | Broadest exposure view | Qualys estates | Sprawling external edge |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Aquila I Attack Surface Monitoring if…
- ✓You want your internet-facing assets, DNS, certificates and uptime watched from one console by an Indian vendor
- ✓You already hold VAPT reports from other testers and want them in one risk view beside continuous discovery
- ✓You may add Aquila I CART or BAS later to prove which of the exposures are really exploitable
Compare alternatives if…
- ✓Asset data must stay in India — Qualys runs an India platform and Tenable lists an AWS Mumbai site for Tenable VM
- ✓You want the broadest exposure view across cloud, identity and OT — Tenable One covers more domains
- ✓Your inventory problem is internal tools that disagree — Arctic Wolf Aurora ASM reconciles them
Do not expect…
- ✓Dark-web, brand or leaked-credential monitoring — that is Aquila I Digital Risk Protection
- ✓Patches or fixes applied for you; remediation tracking is advisory, and the fixes are yours
- ✓A published price, a published hosting region or named ASM customers
Aquila I Attack Surface Monitoring is one of 23 vulnerability management products TechBag carries. The Vulnerability Management guide narrows them to a shortlist and shows the reasoning. →
What does tracking your internet edge by hand cost you?
Drag the sliders (internet-facing assets; engineer-hour cost). Estimates model the engineering time spent keeping an external asset list current by hand, chasing expired certificates and outages, and reconciling VAPT reports, at an assumed 1.5 hours per asset a year, with 70% of it removed by continuous discovery and alerting. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Quote only. Aquila I publishes no price for ASM or any other product, no INR list and no licence meter, so it is not clear whether a quote counts domains, IP addresses, discovered assets or web applications, or what happens as discovery finds more. Whether the manual web testing it lists is included is not published either. TechBag collects your asset list first, then gets the quote itemised in INR with GST.
Aquila I ASM
Best for watching your own internet edge
- Quoted per estate; no public meter
- Discovery, CVE, DNS, uptime, SSL
- Imports third-party VAPT reports
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
Aquila I ASM with CART
Best for finding and proving exposures
- Two products, each quoted
- Discovery plus exploit validation
- Both on the same platform
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
What does the quote count — domains, IPs, discovered assets or web apps — and what happens as discovery finds more?
Where does Aquila I host the SaaS and keep your asset inventory? Get the region in writing for your DPDP Act records.
What seeds discovery — your domain list, IP ranges, certificates — and how are subsidiary or third-party assets confirmed?
Which checks are intrusive, who approves them, and can production systems be limited to non-intrusive scanning?
Is the manual web application testing on the ASM page part of the licence, or a separate service quoted on its own?
Which ticketing, SIEM and chat tools receive alerts? Is a connector list published, or is each one custom work?
Can Aquila I arrange a reference call with an ASM customer in your sector, since it publishes no named case studies?
Will ASM findings satisfy your auditor, or do RBI, SEBI or IRDAI rules still require a separate empanelled VAPT?
Questions buyers ask
Ready to evaluate Aquila I ASM?
Collect the domains, IP ranges and cloud accounts you believe you own first, or let a TechBag advisor get Aquila I’s hosting region and licence meter in writing, with the quote in INR.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.