SurfaceDiff
External attack surface monitoring focused on change detection and historical snapshots
Pricing: Free tier: 1 domain with daily monitoring, no payment card required. Paid tiers at $19 per month and $49 per month, with scan allowances per tier.
Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed August 2026 · How we review listings
What is SurfaceDiff?
SurfaceDiff is an external attack surface monitoring service that scans domains a customer adds to their account and keeps a normalised history of what it finds, so the product answers what changed rather than only what is exposed now. It tracks subdomains, DNS records, open ports, TLS certificates, web service fingerprints and crawlable endpoints, storing each scan as a snapshot and diffing successive runs. The vendor positions it deliberately narrowly, stating it is not a conventional vulnerability scanner or an internet-wide reconnaissance tool. It is built and operated by ITC - IT Consulting, based in Pyskowice, Poland. Plans run from a free tier covering one domain to paid tiers at $19 and $49 per month.
- ✓ The product is scoped honestly: the vendor states plainly that it is not a vulnerability scanner or an internet-wide reconnaissance tool, and the feature set matches that description
- ✓ Terms of service carry an explicit authorization clause requiring that you only add domains you own, control or are authorized to monitor, and reserve the right to suspend accounts scanning without authorization (surfacediff.com/terms)
- ✓ A named operator with a location is published on the about page: ITC - IT Consulting, Pyskowice, Poland
- ✓ The free tier covers a domain with daily monitoring and requires no payment card, so the product can be evaluated before purchase
- • Very new: the domain was registered in June 2026, and no independent reviews or third-party coverage were found on G2, Capterra, Product Hunt, Reddit or Hacker News
- • Authorization to scan is handled by customer attestation rather than technical proof of ownership such as a DNS record, which is common in this category but weaker than verified control
- • The operator is a small consultancy rather than a registered software company; no company registration number is published on the site
- • Change detection is the focus, so it is a complement to vulnerability management rather than a replacement, as the vendor itself states
Reported in public reviews and vendor documentation. See sources below.
Key Features
Are you SurfaceDiff? Improve this listing with screenshots, case studies and more.
Sources & references
Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.
Spot an error, or do you represent SurfaceDiff? Request a correction.
Quick Info
| Pricing | Free tier: 1 domain with daily monitoring, no payment card required. Paid tiers at $19 per month and $49 per month, with scan allowances per tier. |
| Model | Freemium with monthly subscription tiers |
| Founded | 2026 |
| Cloud | Yes |
| Self-Hosted | No |
Last updated: Aug 21, 2026