--- title: "CTM360 Software Pricing, Alternatives & More 2026 | Capterra" description: "With the help of Capterra, learn about CTM360 Software - reviews, pricing plans, popular comparisons to other Risk Management products and more." source_url: "https://www.capterra.com/p/251142/CTM360/" page_type: "product" language: "en" publication_date: "2026-11-11" --- # CTM360 Software Review 2026: Features, Reviews, Integrations, Pros & Cons Last updated on November 11, 2026 Provider data verified by our Software Research team, and reviews moderated by our Reviews Verification team. [Description](#description)[Use cases](#use-cases)[Alternatives](#alternatives)[FAQs](#faqs)[Features](#features)[Pricing](#pricing)[Support](#support) CTM360 ## What is CTM360? CTM360 is a unified external security platform that integrates External Attack Surface Management, Digital Risk Protection, Cyber Threat Intelligence, Brand Protection & Anti-phishing, Surface, Deep & Dark Web Monitoring, Security Ratings, Third-Party Risk Management, and Unlimited Takedowns. Seamless and turnkey, CTM360 requires no configurations, installations, or input from the end-user, with all data pre-populated and specific to your organization. All aspects are managed by CTM360. ## What is CTM360 used for? [Risk Management](https://www.capterra.com/risk-management-software/)[Threat Intelligence](https://www.capterra.com/threat-intelligence-software/)[Cybersecurity](https://www.capterra.com/cybersecurity-software/) Top alternative Featured Starting price $10000 Per User, Per Year Free trial not available Includes Free Version Capterra Shortlist charts the highest-rated and most popular products... Our "Best of" badge program showcases products with the highest ratings... Our "Best of" badge program showcases products with the highest ratings... Do you work for CTM360?[Manage this product listing](https://www.g2.com/products/ctm360-ctm360/claim_requests/new?auto=true) ## Compare with a popular alternative Capterra selects software alternatives based on relevant features, verified user reviews and user interactions. Placement may be influenced by client status. ### CTM360 0.0 VS. [4.7 (107)](https://www.capterra.com/p/172645/Teramind/reviews/) Starting Price $10000 Per User, Per Year Starting Price Contact vendor Free Trial Free Version Pricing Options Free Trial Free Version Ease Of Use 0.0 (0) Ease Of Use 4.5 (212) Value For Money 0.0 (0) Value For Money 4.3 (201) Customer Service 0.0 (0) Customer Service 4.6 (198) ## CTM360 alternatives [4.6 (356)](https://www.capterra.com/p/141080/iAuditor/reviews/) Starting price $29.00 Per User, Per Month Pricing Options Free Trial Free Version User Rating 95% of reviewers rated it above 4 stars Highest Rated [4.8 (126)](https://www.capterra.com/p/97557/QT9-Quality-Management/reviews/) Starting price Contact vendor for pricing Pricing Options Free Trial Free Version User Rating 95% of reviewers rated it above 4 stars [Netwrix Auditor](https://www.capterra.com/p/164872/Netwrix-Auditor/) [4.5 (212)](https://www.capterra.com/p/164872/Netwrix-Auditor/reviews/) Starting price Contact vendor for pricing Pricing Options Free Trial Free Version User Rating 95% of reviewers rated it above 4 stars [Learn More](https://www.capterra.com/p/164872/Netwrix-Auditor/) [Splunk Enterprise](https://www.capterra.com/p/94317/Splunk/) [4.6 (268)](https://www.capterra.com/p/94317/Splunk/reviews/) Starting price Contact vendor for pricing Pricing Options Free Trial Free Version User Rating 96% of reviewers rated it above 4 stars [Learn More](https://www.capterra.com/p/94317/Splunk/) [View all alternatives](https://www.capterra.com/p/251142/CTM360/alternatives/) ## FAQs about CTM360 Overview ### What company size and specific industries is CTM360 built for? CTM360 is designed for enterprise organizations and large institutions in financial services, healthcare, aviation, oil and gas, sovereign wealth funds, conglomerates, education, manufacturing, and government. It fits sectors that need monitoring and protection across complex, high-risk environments. Features and Usability ### What are the key features of CTM360? CTM360 offers monitoring and real-time monitoring, plus threat intelligence and vulnerability scanning for external risk detection. It includes incident management, incident reporting, threat response, risk alerts, risk assessment, and risk scoring. Additional features include reporting and statistics, data visualization, API access, third-party integrations, PCI compliance, SSL security, and whitelisting/blacklisting. Getting Started and Support ### What training and onboarding options does CTM360 offer? CTM360 provides in person training, live online sessions, webinars, documentation, and videos for teams getting started. In person and live online formats support guided instruction, webinars cover group learning, documentation offers written reference material, and videos provide self-paced viewing for product guidance. Getting Started and Support ### What customer support options does CTM360 offer? CTM360 provides Email/Help Desk, a Knowledge Base, 24/7 Live Rep, and Chat. These channels give users direct access to support resources and staffed assistance at any time, but no reviewer feedback is available to describe response speed, helpfulness, or recurring support frustrations. ## Features AI summary Based on 1,730 Risk Management reviews Capterra data shows that buyers of risk management software rank the following features as their top priorities: - **Risk Analysis** (**47%** of reviewers rated this feature as critical) - **Risk Reporting** (**46%**) - **Risk Scoring** (**49%**) CTM360 includes **Risk Reporting** and **Risk Scoring**, giving teams a way to track risk trends and assign consistent ratings across issues. However, it does not offer **Risk Analysis**. Instead, it provides **Risk Assessment** (**54%**), which Capterra reviewers also rate as important. Together, these features help businesses monitor threats, prioritize response efforts, and make more informed risk decisions. 4th Party Assessments Offers tools to assess fourth parties -- your vendor's vendors Access Control Regulate who can view information within the system Access Controls/Permissions Define levels of authorization for access to specific files or systems Account Overview Dashboard of registered domains. Activity Dashboard Dashboard to view the status of ongoing processes, identify current incidents and track past activities Activity Monitoring Track and report on everything that happens within the system or network CTM360 208 features ### All Features - 4th Party Assessments: Offers tools to assess fourth parties -- your vendor's vendors - Access Control: Regulate who can view information within the system - Access Controls/Permissions: Define levels of authorization for access to specific files or systems - Account Overview: Dashboard of registered domains. - Activity Dashboard: Dashboard to view the status of ongoing processes, identify current incidents and track past activities - Activity Monitoring: Track and report on everything that happens within the system or network - Activity Tracking: Track and document all activities across devices, networks, and other systems - Adaptive Learning: Intuitive interface and user-friendly design which seamlessly integrate with existing workflows - Address Validation: Verifies and confirms the accuracy of an address - Advanced Analytics and Reporting: Includes tools for deep analysis of risk data, providing insights into trends and patterns that support strategic risk assessment and decision-making. - AI Copilot: A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users - AI Text Summarization: Condenses long documents or text into a brief summary. - AI/Machine Learning: Software program that continuously adjusts its behavior based on observed data - Alerts: Provides real-time alerts and sends notifications to users in-app or through email, text message or otherwise. - Alerts/Escalation: System alerts about the need to escalate an issue or request - Alerts/Notifications: Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges - Analysis: Provides context around identified information, including historical threat data, threat location data from geotags or inferred data, threat actors names, relationships, URLs, and other relevant information to conduct further investigations. - Analytics: Tools for the systematic analysis of various types of data or statistics - Anomaly/Malware Detection: Automatically identify and flag unusual behaviors and malicious software - Anti Spam: Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox - API: Application programming interface that allows for integration with other systems/databases - Application Security: Identify and respond to security threats to developed applications - Approval Process Control: Manage the process of evaluating documents or requests submitted for approval - Assessment Management: Creation, administration, and evaluation of assessments or tests - Asset Management: Analyzes performance of assets to prepare financial forecasts, perform cash flow analysis, determine value of property, and prepare for acquisition or disposition. - At-Risk Analysis: Identifies location of data that may be less protected and more vulnerable to threats. - Audit Management: Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws - Audit Trail: A record of all activities within the system, including user access, changes made, etc. - Authentication: Verify the identity of users/devices to enable secure access - Automated Reponses: Implements automated responses to certain types of incidents. - Automated Threat Detection: Uses AI algorithms to analyze data for patterns and anomalies that signify potential risks. - Autonomous Task Execution: Completes tasks independently without constant human intervention - Behavior Analytics: Track and analyze user behavior within a system or network - Behavior Tracking: Track visitors'/audience's responses across web pages and other optimized content - Behavioral Analytics: Track and analyse user behavior within a system or network - Biometrics: Identify or authenticate a person's identity through biological data such as fingerprints or facial patterns. - Blacklisting: Allows users to temporarily or permanently block potential fraudsters. - Blockchain Support: Supports access to crypto blockchains - Bot Mitigation: Reduce or block bot traffic - Brand Guidelines: Provides centralized location and shareable capabilities for storage, distribution, and editing of brand guidelines - Brand Management: The process of developing, monitoring, and maintaining the brand value, reputation, and awareness across the target audience. - Brand Protection: Analyzes an organization’s online presence to identify instances of brand impersonation. - Brand Tracking: Monitor social media posts or web that mention a particular brand - Case Management: Work on a set of tasks related to a particular charge, patient, legal issue or any other complex entity or process - Centralized Dashboard: Offers a centralized dashboard to monitor, collect, process, alert, analyse and search through data flagged by the software. - Centralized Vendor Catalog: Allows companies to assess vendors profiles in a centralized catalog - Change Management: Track and monitor efficient handling of all changes/transitions - Cloud Backup: Process of backing up of files and applications to cloud-based remote servers for protection of data - Collaboration Tools: Provides a channel for team members to share AI models, media files, communicate, and work together - Communication: Communciates results to employees in the form of mass messages if there has been an illness outbreak within the workplace - Competitive Analysis: Evaluating strengths and weaknesses of companies with the same target audience - Compliance Management: Track and manage adherence to policies for any service, product, process, or supplier - Compliance Monitoring: Uses AI to ensure call compliance with regulations like TCPA or GDPR by detecting violations and triggering alerts or restrictions. - Comprehensive Risk Assessment: Identifies, evaluates, and monitors various types of risks to understand the overall risk exposure and prioritize them based on potential impact. - Consent Management: Manage user consent requests and documents - Content Library: Centralized repository to store content and assets - Continuous Monitoring: Conduct tracking and assessment of application and device behavior without breaks or interruptions - Corrective and Preventive Actions (CAPA): Investigate and take action at root cause or error in processes to prevent recurring issues - Cross-system Integration: Works across multiple software systems or databases - Customer Data Management: Searchable repository of information about clients - Customizable Dashboards: Provides customizable dashboards that present real-time data on vulnerabilities, risks, and compliance status - Customizable Reports: Alter the layout and content of reports - Customizable Templates: Pre-designed layouts that can be customized to match preferences and requirements - Dashboard: Assembly of graphs and charts for visualizing and tracking statistics/metrics - Data Capture and Transfer: Import, collect, and capture data from multiple sources - Data Import/Export: Import and export data to and from software applications - Data Leak Detection: Detects sensitive data published on the dark web and other paste sites. - Data Security: Protect sensitive data for digital privacy - Data Visualization: Graphical representation of data - DDoS Protection: Protect networks against DDoS (Distributed denial-of-service) attacks - Decision Making: Makes informed choices based on available data and objectives - Deployment: The process in which users integrate their existing security systems and endpoints to the threat intelligence platform. - Digital Footprint Mapping: Creates a digital footprint of an organization's ecosystem to identify exposed digital assets. - Digital Signature: Electronic signing method that validates the authenticity and integrity of a digital document - DMARC Alignment: Status of DMARC compliance across domains. - Document Management: Store, manage, and track all electronic documents in a centralized location - Document Storage: Store and organize documents in a centralized system - Domain Monitoring: Monitoring multiple domains for occurrences of brand logos, keywords, names, and more. - Encryption: Convert data into a code for security - Endpoint Intelligence: Analysis for users to examine threat intelligence data specific to their endpoint devices. - Endpoint Management: Track status, assign actions, and control access to systems for devices within the organization - Endpoint Protection: Protect users working remotely and provide secure environments for personal devices to access company programs - Engagement Tracking: Tracks metrics that provide insight into how a user interacts with any interface or product - Event Analysis: Investigate security threats and validate malicious activity - Event Logs: A chronological record of actions or occurrences within a network, software, or process - For Financial Institutions: Financial services institutions such as traditional banks, hedge funds, investment banks, and insurance agencies. - Forms Management: Store, manage and track all forms in a centralized location - Fraud Detection: Identify and prevent suspicious activity - Fraud Markers: Tags users suspected of committing fraud and identifies them upon return. - Gap Analysis: Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols. - Generate Attack Scenarios: Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets. - Generate Threat Detection Rules: Use AI to automatically create detection rules based on observed patterns. - Generate Threat Summaries: Use AI to produce concise summaries of complex threat reports or alerts. - Generative AI: Use AI to generate content in the form of text, images, videos, etc. - Geolocation: Determines the location of a device using GPS or an IP address - HIPAA Compliant: Compliant with HIPAA, which sets standards for sensitive patient data protection - ID Analytics: Stores data from external or internal sources related to fake accounts, evaluating users for risk. - Inbound Emails: DMARC alignment on inbound emails. - Incident Management: Manage and track all disruptions and incidents - Incident Reporting: Report and update incidents related to health or workplace injuries that occur on a job or en route to a job site - Incident Reports: Reports based on IT incidents so IT members can prioritize high risk issues and maintain a record of problems and how often they occur. - Incident Response Capabilities: Provides resources for a coordinated and efficient response to security incidents, facilitating investigation, containment, and recovery efforts. - Integration and Data Consolidation: Ensures seamless interaction with other systems and unification of risk data, enabling a comprehensive view and efficient management of risk exposure. - Integrations: Ability for the product to integrate with software to view and utilize contact and account buyer intent data (i.e. CRM software, marketing automation software, account- based marketing software, etc.) - Intellectual Property Protection: The process of discovering content on the web that is same or similar to logos, trademarks or other proprietary content - Intelligence Reporting: Actively gathers data on suspicious transaction sources and characteristics of common committers of fraud. - Internal Controls Management: Ensure internal objectives and compliance with policies are met - Investigation Management: Oversee people and resources to carry out an investigation - IT Reporting: Tracking KPIs over a certain period to assess helpdesk issues, ticket status & resolution, costs and revenue stats, assets usage & more - IT Risk Management: Manage risks related to IT systems - Keyword Tracking: Track and monitor a specific set of keywords - Leak Source: Provides additional context and analysis to help identify the source of leaked information. - Legal Risk Management: Manage the risk of both financial and reputational loss resulting from nonadherence to current legislation - Lifecycle Management: Manage the end-to-end lifecycle, from initial setup/development to deployment and maintenance - Maintenance Scheduling: Schedule predetermined or ad hoc maintenance services and labor requests - Marketplace Monitoring: Monitoring multiple marketplaces for mentions or transactions related to brand logos, keywords, names, and more. - Metadata Management: Collect and maintain structured information that describes data or content - Mobile Access: Access software remotely via mobile devices - Monitoring: Observe and track the demand, usage, progress or quality of a system, product, or user - Monitoring - Dark Web: Monitors select keywords on the dark areas of the web, which are only accessible via Tor and I2P, such as illicit marketplaces and dark forums. - Monitoring - Deep Web: Monitors select keywords on the deep web, which are non-indexed parts of the internet not available on the surface web. - Monitoring And Alerts: Monitors changes in risk and sends notifications, alerts, and reminders for specific actions including: upcoming assessments, profile access requests, etc - Multi-step Planning: Ability to break down and plan multi-step processes - Network Monitoring: Tracks and makes accessible data on the health of servers and other network components. - Network Provisioning: Set up and configure network resources to make them accessible for authorized users, devices and servers - Network Scanning: Scanning networks to identify security threats - Network Security: Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources - Onboarding: Process of familiarizing new clients, stakeholders or employees with the company, a new location, or a service - Operational Risk Management: Manage risk that occurs from systems failure or inadequate processes - Outbound Emails: DMARC alignment on outbound emails. - Password Management: Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords - Patch Management: Install software updates and bug fixes remotely - PCI Compliance: Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS) - Plans: Provide plans to enforce pricing and brand policies - Policy Configuration: Settings for establishing and modifying DMARC enforcement within domains. - Policy Management: Create, manage, and track policies and procedures within an organization - Predictive Analytics: Predict future data based on historical data sets - Prioritization: Arrange tasks based on the level of priority or urgency - Proactive Alerts: Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered. - Proactive Assistance: Uses webpage, tab, browsing session, or selected text context to generate responses and suggestions - Profiling: Scanning of users & devices to ensure there are no potential threats - Questionnaire Templates: Offers standardized security and privacy framework questionnaire templates - Real-time Alerts: Receive notification of issues as soon as they occur - Real-Time Analytics: Analyze and gain insights into data in real-time - Real-Time Data: Receive data and information in real time - Real-Time Monitoring: Active monitoring of systems, applications, or networks - Real-time Monitoring and Alerts: Allows for continuous surveillance of risk factors, providing timely alerts to mitigate emerging risks effectively. - Real-Time Notifications: Notifications that are delivered to users as soon as an event occurs - Real-Time Reporting: Active reporting of data and metrics - Reconnaissance: Gathers information about the system and potential exploits to be tested. - Remediation Management: Identify and orchestrate execution of actions needed to restore systems to optimal conditions - Reminders: Timed notification for any upcoming task, deadline, appointment, or activity - Remote Monitoring & Management: Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications - Reporting & Statistics: Collection, analysis, and representation of numerical data and generation of reports to understand various patterns - Reporting/Analytics: View and track pertinent metrics to find patterns and gain insights from data - Reputational Risk Management: Identify, monitor, and assess risks to brands - Reseller Database: Provide a database or authorized and unauthorized resellers - Response Management: Planning and managing of resources and procedures to mitigate the impact of events and incidents - Risk Alerts: Notifying as a warning or reminder of a potential or imminent hazard - Risk Analysis: Analyze potential risks across the organization - Risk Assessment: Initiate collection and analysis of known risks - Risk Assessment Reports: Generates reports that assess the overall digital risk posture of an organization. Reports may include an analysis of the identified threats and vulnerabilities. - Risk Management: Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties - Risk Reporting: Reporting of risks associated with specific actions, events, or entities - Risk Scoring: Assess and score risks using risk matrices - Risk-Prioritization: Allows for vulnerability ranking by customized risk and threat priorities. - Scenario Planning: Develop potential scenarios to identify risks and opportunities - Scheduling: Plan availability and assign specific time slots for tasks and resources - SDKs: A set of software tools and programs used by developers to create applications for specific platforms - Search/Filter: Search and filter data across systems to locate required information by entering keywords or certain criteria - Secure Data Storage: Securely stores data to prevent data loss or breaches - Secure Login: At least a username and password is required to access the system - Security Auditing: Systematic evaluation of the security of a company's overall security system and situation - Security Validation: The product has a recurring examination process to update your intelligence reports as new threats emerge. - Security Workflow Automation: Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information. - Server Monitoring: Continuously scan servers on a designated network to monitor health and search for any irregularities or failures - Simple Search: Search through real-time and historical data without using technical query language. - Single Sign On: Allow users to access multiple services after entering their login credentials once - Social Media Monitoring: Track activity on sites such as Facebook, Twitter, Instagram, etc. - SSL Security: Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access - Task Management: Create, manage and track all task activities and progression - Third-Party Integrations: Set up connections to third-party platforms to improve business processes - Threat Identifications: Timely identification of fraudlent emails. - Threat Intelligence: Information to prevent, understand and identify cyber threats - Threat Interception: Blocking fraudlent emails from reaching destination. - Threat Remediation: Automates threat remediation and blocks common attacks such as SQL injections. - Threat Removal: Eliminating or deleting fraudulent emails and containing threats. - Threat Response: Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm - Threat Trends Analysis: Offers analytics features to provide insights into digital risk trends and the effectiveness of mitigation strategies - Ticketing: Customize, sell, and distribute tickets - Tokenization: Convert sensitive data into unique identification symbols (Tokens) that retain all essential information - Track: Track the effectiveness of enforcement activities - Transaction Scoring: Rates each transaction's risk based on specific factors and their benchmarked scores. - Two-Factor Authentication: Extra layer of security that requires not only a password and username but also something specific to that user - User Access Control: Offers role based access controls to allow only permissioned users to utilize various parts of the software. - User Management: Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks - Version Control: Track revisions and updates made to files and navigate between different versions - Video Conferencing: Connect with meeting participants remotely over video - Violation Tracking: Identify and flag system, guidelines, or branding violations/suspicious behavior by users, customers, vendors, or partners. - Violations: Identify pricing or brand policy violations - VPN: Extend virtual private network over public networks to enable protected information exchange - Vulnerability Assessment: The process of identifying, quantifying, and prioritizing the vulnerabilities in a system. - Vulnerability Intelligence: Stores information related to new and common vulnerabilities and how to resolve them once incidents occur. - Vulnerability Scanning: Discover patch statuses and vulnerabilities - Web Traffic Reporting: Collect and analyze traffic data about website visitors - Web-Application Security: Identify and respond to security threats to web applications - Whitelisting/Blacklisting: Control system access and/or deliverability for applications and email addresses - Workflow Management: Create, design and manage workflows for repetitive tasks --- Get Advice We can help you find the software with the features you need. ## Pricing Free Version Basic $10,000 Per User,Per Year Connect with a Capterra advisor for a free 15-minute consultation Get a personalized software list aligned to your business needs with guidance from our expert advisors. Our team has helped 1 million+ businesses like yours find options that fit their needs. ## Support, customer service and training options Support - Email/Help Desk - FAQs/Forum - Knowledge Base - Phone Support - 24/7 (Live rep) - Chat Training - In Person - Live Online - Webinars - Documentation - Videos Deployment - Web - Android - iPhone/iPad Typical users - Freelancers - Small businesses - Mid size businesses - Enterprises ## Top-rated software of 2026 ### Fill out the form and we'll send a list of the top-rated software based on real user reviews directly to your inbox.