External Attack Surface Management (EASM)

Overview

External Attack Surface Management provides visibility into your organization's publicly exposed digital footprint using automated discovery, scheduled external scanning, and security review workflows, helping identify internet-facing assets, services, and exposure risks before they become larger concerns. Available in three tiers based on organizational size, monitoring scope, and reporting needs.

Key capabilities

• Automated discovery of publicly accessible assets (domains, subdomains, IPs, hostnames, URLs, certificates, websites, cloud-facing services).
• Identification of exposed services, outdated technologies, misconfigurations, or externally visible systems.
• Detection of previously unknown or unmanaged internet-facing assets within approved scope.
• Scheduled monitoring for new external exposures or changes.
• Risk insights, vulnerability indicators with severity/prioritization, and reporting to support cyber insurance and compliance-support documentation.

Limitations & scope notes

• Monitoring is agentless and limited to externally visible exposure indicators, scheduled scans, automated discovery, and associated threat/vulnerability intelligence.
• Does not perform exploitation activity, penetration testing, authenticated internal scanning, or internal network assessment.
• Findings are based on publicly observable data; does not guarantee identification of all vulnerabilities, exposures, or threats.
• Coverage is based on approved domains, IP ranges, hostnames, URLs, and externally facing assets included during onboarding.

Related terms