External Attack
Surface Management
Find every host, domain and service you expose to the internet, including the ones nobody remembers setting up, and fix the exposures that matter first.
Solutions
What is External Attack Surface Management (EASM)?
EASM means finding and protecting the parts of your organization that can be reached from the internet, meaning websites, applications and the network infrastructure behind them. The first scan of a mid-sized company tends to turn up a forgotten staging site, an expired certificate and at least one admin login that should never have been public.
EASM looks from the outside in. To see how it differs from inventory tools that pull data from your own systems, read our guide to cyber asset attack surface management (CAASM), or compare vendors in our attack surface management tools comparison.
Benefits of TIKAJ's EASM
Most organizations know their main website well. The trouble is everything else under the domain.
Insight into digital footprint
Expect to find APIs nobody documented and the shadow IT marketing put on its own cloud account. Changes to your IT estate are picked up as they happen.
Map & inventory DNS/internet records
DNS records for your systems, websites, APIs and subdomains are catalogued. The classic find is an old CNAME pointing at a deleted Azure or AWS resource, which anyone can re-register and then serve content on your subdomain.
No limit on investigations
Recheck a host the morning after a fix, or look at a new acquisition's domains on day one. Change and deployment options are flexible.
View Your Assets the Way Attackers Do.
Attackers do not start from your asset register. They start from your domain name, pull subdomains from certificate logs, scan the IP ranges and look for the oldest, least maintained thing they can find. Doing that exercise yourself, and repeating it, is the whole idea of EASM.
Schedule a DemoFive Essential Components
How the work breaks down in practice
Map Business and IT Relationships
First, work out what the company actually is. Acquisitions, subsidiaries and cloud accounts that individual teams opened each bring their own domains and hosts, and that is where most forgotten assets come from.
Assess Assets for Vulnerabilities
Then test what you found. The usual suspects are expired or self-signed certificates, admin panels open to the internet, old software versions in banners, and RDP or database ports nobody meant to expose.
Rank by Business Risk
Next, rank it. Weak TLS on a test server can wait; an open admin panel on the payments host cannot. You can only make that call if assets, sensitive data and processes are tied to the departments that own them.
Hand Over the Evidence
Then give IT operations what they need to fix it without a meeting, meaning the host, the port, what was seen and when, and what to change.
Keep It Running
And start again. Someone launches a campaign site on a new subdomain, a certificate lapses, an engineer opens a port for a vendor and forgets it. The scan never really finishes.
FAQ
Frequently Asked Questions
There are No Stupid Questions, Ask Away, We're All Ears
Need More Information?
If you want to see what your own external attack surface looks like, write to us or book a demo.
Contact Us