Offensive Security
What is Attack Surface Management?
Also known as: ASM
Attack surface management is the continuous discovery, inventory, and monitoring of an organization's internet-facing assets and the exposures they present. It matters because unknown or forgotten assets, such as shadow IT and stale subdomains, are frequent entry points for attackers.
Example
A monitoring process discovers a forgotten staging server exposed to the internet with default credentials, prompting immediate removal.
Reference: CISA ↗
Related Clear Infosec services
Related terms
Have a question about attack surface management in your environment? Talk to our team.