12 asset types
Domain, subdomain, IP, mobile app, social media, VIP staff, keyword, logo, location, technology, vulnerability and SSL certificate.
ASM 12 asset types, a 0–100 risk score, a continuous findings stream
Attack Surface Management
Every externally visible asset, from domains to VIP staff, is inventoried, scanned and given a 0–100 risk score and a letter grade. What is exposed, how risky it is and what changed this week — on one screen.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
An inventory is a process, not a table. Any subdomain nobody claims eventually goes stale; a forgotten CNAME points to a deleted cloud bucket and your domain starts serving someone else's content. Attack Surface Management gives every asset an owner and a risk score — and when the score moves, it shows why.
What it does
Risk score and grade
Every asset gets a 0–100 score and an A–F grade. Tags such as critical infrastructure or PCI-DSS scope drive priority.
Finding categories
Subdomain takeover, sensitive paths (/.git, /backup), known CVEs, email security (DMARC) and dark web mentions.
How it works
-
01
Define
You enter your root domains, IP blocks, brands and VIP list. No agent is installed.
-
02
Discover and scan
Subdomains, open ports, technology versions, certificates and DNS records are enumerated; each asset gets its own profile.
-
03
Score and watch
Findings feed the score by severity. New findings, resolved findings and the riskiest assets are tracked week over week.
Sub-modules
ASSETS
Monitored Assets
Twelve asset types from domains to logos, each with an importance score, risk split, tags, who added it and who …
The single source of inve…
PROFILE
Asset Profile and Risk Score
A 0–100 risk ring, importance, active vulnerability count and fifteen tabs, including subdomains, WHOIS, DNS, technologies, vulnerabilities, IPs and ports, …
Everything about one doma…
FINDINGS
ASM Findings
Subdomain takeover, reachable sensitive paths, known CVEs and dark web mentions in one list, filtered by asset, type and status.
What is exposed, with sev…
What you get
- Orphaned subdomains become visible before someone takes them over.
- Patch priority follows real exposure, not just CVSS.
- An audit's "what do we expose?" gets a recorded answer.
Other modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.