External Attack Surface Management (EASM) Solutions

1. Asset discovery

External asset discovery refers to the process of bringing to light domains, IP addresses, and relevant DNS records that could serve as attack vectors.

Here are some of the ways we can help at this stage:

• Discover domains and subdomains related to your or your clients’ organizations
• Uncover subdomains that could have dangling DNS records
• Track down domains and subdomains connected to your organization based on IP address resolutions

2. Asset attribution and validation

Uncovered external assets must be analyzed and processed for anomalies and vulnerabilities. Our EASM Solutions can help by providing context in terms of:

• Checking the current and historical WHOIS ownership data of Internet properties
• Identifying the geolocation, network information, and related infrastructure of IP addresses and ranges
• Discovering vulnerabilities in SSL configurations and certificates, domain infrastructure, and dozens of other potential attack vectors

3. Remediation prioritization

Get insights into which assets are the most vulnerable and require immediate attention and remediation.

Here are some of the ways we can help at this stage:

• Rank domain names and IP addresses according to their risk scores
• Take immediate action on assets that are flagged “malicious”
• Assess vulnerabilities and address the most severe ones first

4. Continuous monitoring

External attack surface management is a never-ending and multidimensional process.

Our EASM Solutions can notably help in these ways:

• Monitor when company-related assets appear in the DNS
• Notice when previously identified attack vectors and vulnerable assets get updated or become newly active
• Visualize changes to the content that typosquatting domains and subdomains host