Attack surface management and exposure reduction: asset discovery, external scanning and penetration test findings

Your attack surface is every point an attacker could use to get in: internet-facing systems, cloud services, APIs, remote access, third-party connections, user accounts and even people who can be phished. Attack surface management (ASM) continuously discovers that surface from the attacker's point of view and works to shrink it.