Attack surface management
ASM · The process of continuously discovering internet-facing assets, keeping an inventory and raising an alert when a new flaw or misconfiguration appears.
- 01
Why it matters
The attack surface changes every day: a new subdomain is opened, a certificate approaches expiry, a service is exposed to the internet by mistake. A test once a year misses doors opened in between. Continuous monitoring lets you notice them before attackers do.
- 02
Example
Monitoring reports in the morning that an admin panel on a subdomain added overnight is open to the internet and running with the default password. The panel is closed the same day.
- 03
Common mistake
Listing everything found without prioritising. Without a defined process nobody picks the critical item out of hundreds and gets it to its owner; every asset needs someone responsible.
- 04
Related terms
Related services and guides
Let's talk about your project.
Tell us what you need; we will define the scope together.