External attack surface management
External attack surface management (EASM) looks at the company the way an outsider does. It finds domains, subdomains, cloud services, certificates and open ports that the customer may have forgotten, then ranks what is exposed.
What we do
- Authorized asset inventory
- Exposure ranking
- Dangling DNS cleanup
- Certificate watch
- Owner assignment
- Monthly exposure reports
- Retest after fixes
Our team has experience with commercial EASM platforms and with open reconnaissance data. We work only on assets the customer owns or has authorized, and feed findings into the vulnerability management and ticketing process so each exposed item gets an owner.
This group links to our Cybersecurity service and to the vulnerability management group. These are tools our team has experience with, not partnerships.
Leading platforms we work with
- CyCognito
- Censys
- Microsoft Defender External Attack Surface Management
- Shodan
Platforms and practices
- Asset discovery from domains and certificates
- Subdomain and shadow IT inventory
- Exposed ports and services
- Expired and misissued certificates
- Dangling DNS records
- Exposed admin panels and storage
- Third-party and acquired-company assets
- Finding ownership and ticketing
- Mapping to MITRE ATT&CK techniques
References
Sources last checked .
Product names are trademarks of their owners and are listed to describe our experience; they do not imply endorsement or partnership.
How we use External attack surface management for clients
Cybersecurity
We find out whether everything you run is safe from attackers, then we fix it.
Learn moreManaged IT Services
We run your IT day to day so it stays secure: help desk, devices, Microsoft 365, Exchange, Active Directory, backups, networks and monitoring.
Learn moreCyber Automation
Custom AI agents that do repetitive work around the clock, with human review where it matters.
Learn moreFrequently asked questions
Direct answers to the questions we hear most. Something else on your mind?
Send us a messageWhat does external attack surface management find that a vulnerability scan does not?
A scan checks systems you already know about. External attack surface management finds the ones you may have forgotten: old subdomains, shadow IT, dangling DNS records, expired certificates and exposed admin panels or storage. Then it ranks what an outsider could see.
Is it legal to scan our own external assets?
Scanning assets you own or are authorized to test is routine. We work only on assets the customer owns or has authorized in writing. If you are unsure whether a domain or cloud account is yours, confirm that first with counsel or the asset owner.
How often should the external view be checked?
Your external footprint changes whenever someone adds a domain, a certificate or a cloud service, so a one-time scan goes stale. We run it on a schedule, with monthly reports, and retest after fixes.
Who fixes what the scan finds?
Each exposed item gets an owner and a ticket in your existing process, so findings do not sit in a report. We can fix items ourselves, such as cleaning up dangling DNS, or hand a clear task to the team that owns the system.