Finding types
Subdomain takeover, sensitive paths, known vulnerabilities, dark web mentions, email security.
FINDINGS What is exposed, with severity
ASM Findings
Subdomain takeover, reachable sensitive paths, known CVEs and dark web mentions in one list, filtered by asset, type and status.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
The findings list is sorted by severity, and each row says which asset, which type and how many times it was seen. Example critical findings: a subdomain pointing to an orphaned S3 bucket, a reachable .git/config on a production server, an application exposed to Spring4Shell (CVE-2022-22965).
What it does
Riskiest assets
Ranked by score and grade, so it is clear where fixes go first.
Weekly change
New findings and those resolved in the last 7 days are counted separately.
What you get
- A critical finding does not get lost on page 40 of a scan report.
- Repeated findings are merged, reducing noise.
- The effect of a fix shows up in the score.
Scenarios featuring this module
Exposed admin panel on a forgotten subdomain
A subdomain left running after a marketing campaign ended stayed up on an outdated CMS version, with its panel exposed to the internet.
3 modules
Other modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.