What do you feel about Attack Surface Management & similar tools landscape ?

From months I have been going through a lot of tools

1. Configuration/Mis Config Management tools for cloud - Internal Issues at high level
2. External Attack Surface Management tools - Things outside your perimeter
3. Internal Tools - SIEM, XDR, MDR, DLP...etc - which are managed by SOC Services
4. Phishing simulation platforms
5. Standards like DMARC, BIMI etc
6. Compliance - ISO 27001, HIPPA, SOC2 blah blah....
7. Did I miss anything ?

Regardless of all these - …

attack attack surface attack surface management cloud configuration cybersecurity dlp etc external external attack surface management high internal lot managed management mdr perimeter siem things tools xdr