External Attack Surface Management (EASM)

What this service offers

This service continuously discovers and monitors your public perimeter — domains, subdomains, ports, certificates, and shadow IT exposures.

It provides external boundary awareness before breaches start from the outside.

• Ongoing discovery of public assets tied to your domains
• Alerts for expiring TLS and risky public services
• Exposure checks on internet-facing applications
• Shadow-IT style discovery of unexpected public assets

Limitations (honest scope)

Clear boundaries help you buy the right module — not oversell.

• Outside-in view — it does not replace internal vulnerability scanning (see VMaaS).
• Needs accurate primary domain scope from you; unknown brands/domains won’t be inventable.
• Does not automatically shut down exposed services — your IT remediates.
• Zero agents required, but also means no deep internal host forensics from this module alone.

Who should go for it

• Companies with many public sites, brands, or cloud apps.
• Security owners who fear forgotten subdomains and open ports.

Usually not the best fit if…

• Fully offline organizations with no public internet footprint.