Magic Quadrant for Exposure Assessment Platforms
Vendors or products added in this year’s report may indicate a change in the market, change in evaluation criteria, or change of focus by the vendor.
Vendors or products dropped from one year to the next may indicate a change in the market, change in evaluation criteria, or change of focus by the vendor.
No vendors were dropped in this report.
This is the first version of the Magic Quadrant for Exposure Assessment Platforms. It replaces the Market Guide for Vulnerability Assessment. The EAP market emerged from vulnerability assessment and adjacent capabilities such as vulnerability prioritization technology (VPT), external attack surface management (EASM), cyber asset attack surface management (CAASM), and breach and attack simulation (now combined with automated pentesting as adversarial exposure validation [AEV]). These capabilities have since converged or complemented each other to form the EAP market.
A: As this is a new Magic Quadrant, no vendors were dropped. The document states: 'We review and adjust our inclusion criteria for Magic Quadrants as markets change. As a result of these adjustments, the mix of vendors in any Magic Quadrant may change over time. A vendor's appearance in a Magic Quadrant one year and not the next does not necessarily indicate that we have changed our opinion of that vendor. It may be a reflection of a change in the market and, therefore, changed evaluation criteria, or of a change of focus by that vendor.'