How does blacklens.io compare vendors?

We compare verifiable criteria in these areas: attack surface and early warning, vulnerability management, penetration testing, dark web and supply chain, analysis and platform. Details on blacklens.io come from the product and its documentation. Details on other vendors come from publicly available information such as websites, datasheets and documentation.

Why are there no scores or rankings?

Because solutions are built for different jobs. A specialised dark web service is not a weaker vulnerability scanner, it has a different focus. The comparison therefore shows what is included and names each solution's strengths, including where another vendor offers something blacklens.io does not.

What do “partial” and “no public information” mean?

“Partial” means a feature is available with limitations, as an add-on module or depending on the licence. The note in the cell names the condition. “No public information” means public sources neither confirm nor rule out the feature.

Can blacklens.io be combined with other solutions?

Yes. blacklens.io offers a REST API with more than 250 endpoints, a Microsoft Sentinel solution and integrations for Jira, ServiceNow, Microsoft Teams, Slack and webhooks. Findings flow into existing SIEM, ticketing and alerting processes, even if you keep a specialised solution for some areas.

A detail is out of date. How do I report it?

Feature scope and licences change continuously. Write to hello@blacklens.io and name a public source. We check the detail and update it in German and English with a new as-of date.

Compare

blacklens.io compared

9 solutions companies evaluate alongside blacklens.io, grouped by focus and compared on 32 verifiable criteria. No scores, with each solution's strengths.

blacklens.io vs. vendor32 criteria

Criterionblacklens.ioVendor

Internal scanning

Dark web monitoring

Supplier ratings

Continuous pentesting

Firewall connections

Coverage and strengths on both sides, no scores

What each solution is built for

Most solutions have a clear focus. Choose by what you need to cover.

Vulnerability scanning
Regular system scans, often with a rating and a report.
- A1 Offensity
- lywand
External attack surface
Find internet-facing assets and watch them for vulnerabilities.
- Microsoft Defender EASM
- Arctic EWS
Threat intelligence and digital risk
Threats to the company and brand on the dark web and in open sources.
- CrowdStrike Falcon Intelligence Recon
- Cyberint
Dark web monitoring
Leaked credentials, infected devices and leak sites.
- KADUU
Supplier risk
Suppliers' security posture from publicly available information.
- RiskRecon by Mastercard
Security modules and services
Several modules such as ASM, dark web and firewall monitoring in one console.
- SecureSIGHT

blacklens.io

Brings scanning, early warning, dark web, supplier ratings and pentesting together in one workflow, with one prioritisation and one report.

External and internal scanning
Early warning for new CVEs
Dark web monitoring
Supplier rating and watchlist
Typosquatting
Pentests by humans

What matters when you choose

Five questions that make the difference in evaluations, whichever solution you pick.

Do you also see the internal network?
External scans show what is reachable from the internet. After initial access, attackers move laterally, so servers, clients and Active Directory belong in the same view.
Are emerging threats checked against your systems?
A new CVE matters when it affects your technologies. It helps to match it against your own inventory and check it automatically instead of waiting for the next scan.
Are credentials and suppliers covered?
Many attacks start with credentials from infostealers or at a supplier. Ask whether the dark web and ransomware leak sites are monitored continuously and whether you see your suppliers' security posture before an incident.
Who confirms what is exploitable?
Automated scans find a lot. Pentesters confirm what is actually exploitable and retest fixes.
Where are data and AI processed?
For NIS2, DORA and the GDPR, the hosting region, scan locations and whether AI features use external providers all matter.

How we compare

Verifiable criteria
Only features that can be shown in the product or in public sources. Matters of taste such as ease of use are left out.
Strengths, not rankings
Every solution has a focus. We show coverage and strengths, not scores.
Corrections welcome
Send notes with a source to hello@blacklens.io. We update with a new as-of date.

Details on other vendors are based on publicly available information such as websites, datasheets and documentation, as of: 27 Oct 2026. Feature scope and licences change. Brand names belong to their respective owners. Send corrections with a source to hello@blacklens.io.

What blacklens.io does differently

Sentry in the internal networkonline

Servers423 critical

Clients186

OT & IoT172 critical

Network91 critical

Active Directory12 accounts without sign-in for 90 daysMedium

External, internal and cloud together

External scans, the Sentry agent and cloud checks share one status, one prioritisation and one report.

Supplier ratings12 suppliers, avg. 74

DSoftware Zulieferer AGCriticality: criticalGrade B → DKnown exploited63

FDruckerei Muster KGCriticality: lowRansomware31

ALogistik Partner GmbHCriticality: high94

BMuster SteuerberatungCriticality: medium86

Dark web and supply chain on one platform

Leaked identities matched against IAM, an A to F grade per supplier and ransomware leak sites in view.

Where your data is processed

PlatformDACH data centres, ISO 27001, SOC 2

Scan infrastructureAustria, Germany, Switzerland

AI analysisSelf-hosted LLM, no external providers

Fixed source IP rangesAllow in firewall, WAF and IDS

European operation, self-hosted LLM/AI

Certified data centres and our own scanners only in the DACH region, no external AI providers.

Visuals show sample data.

Frequently asked questions about the comparison

: We compare verifiable criteria in these areas: attack surface and early warning, vulnerability management, penetration testing, dark web and supply chain, analysis and platform. Details on blacklens.io come from the product and its documentation. Details on other vendors come from publicly available information such as websites, datasheets and documentation.
: Because solutions are built for different jobs. A specialised dark web service is not a weaker vulnerability scanner, it has a different focus. The comparison therefore shows what is included and names each solution's strengths, including where another vendor offers something blacklens.io does not.
: “Partial” means a feature is available with limitations, as an add-on module or depending on the licence. The note in the cell names the condition. “No public information” means public sources neither confirm nor rule out the feature.
: Yes. blacklens.io offers a REST API with more than 250 endpoints, a Microsoft Sentinel solution and integrations for Jira, ServiceNow, Microsoft Teams, Slack and webhooks. Findings flow into existing SIEM, ticketing and alerting processes, even if you keep a specialised solution for some areas.
: Feature scope and licences change continuously. Write to hello@blacklens.io and name a public source. We check the detail and update it in German and English with a new as-of date.

Test it on your own domain.

See within 24 hours what blacklens.io finds for your domain.

Try free for 14 days Book a demo

14 days free, all features
No credit card required
We walk you through your first findings

blacklens.io compared

What each solution is built for

Vulnerability scanning

External attack surface

Threat intelligence and digital risk

Dark web monitoring

Supplier risk

Security modules and services

What matters when you choose

Do you also see the internal network?

Are emerging threats checked against your systems?

Are credentials and suppliers covered?

Who confirms what is exploitable?

Where are data and AI processed?