1. Exposed devices and services

Reduce your risk by identifying devices or services needlessly connected to the internet. Unless requiring access from the public or a large number of people, most devices and services should only be available locally, or behind a well-segmented, multifactor VPN.

2. End-of-life software and operating systems

All devices and software in your environment should receive regular security updates, and this is especially true for assets in your external attack surface. If it’s directly connected to the internet, it should still receive vendor support with regular patches.

3. Insecure cloud deployments

It’s very easy to accidentally expose your cloud infrastructure to the internet, which could be putting you at unnecessary risk. Our attack surface reports detect things like domain controllers and LDAP servers that have likely been exposed accidentally.

4. Third-party risks

Despite usually being held in third-party data centers and providing no direct access to your internal network, the IP hosting your website is part of your threat surface. Your ASR can detect if third parties you work with may be putting you at heightened cyber risk.