Attack surface (CTEM)
The Attack surface (CTEM) module scans your domain from outside to show what an outsider can see of your organisation, and which exposure findings to triage and fix first.
Who it is for
- Organisations with a public domain and no current picture of the sites, hosts and certificates behind it.
- Security leads who want an outside-in view of their risk, and the findings to fix first.
What you get
| Capability | Where in the app | Guide |
|---|---|---|
| Scanning authorised for your domain | Project settings | Run your first scan |
| Attack-surface scans, passive or deeper, on demand or on a schedule | Tasks › Scans | Scans and runs |
| A live view of a running scan, and each run's results | Tasks › Scans, Tasks › Runs | Scans and runs |
| An inventory of networks, identities, apps, devices and data | Assets › Inventory | Assets |
| The findings to fix first | Exposure › Overview | Exposure |
| Findings to filter, triage and export | Exposure › Findings | Exposure |
| Vulnerabilities with CVE, CVSS, EPSS and known-exploited enrichment | Exposure › Vulnerabilities | Vulnerabilities |
From setup to result
- Authorise scanningProject settings
- Run or schedule a scanTasks › Scans
- See what was foundAssets › Inventory · Exposure › Findings
- Triage and fixExposure › Findings
Good to know
Will a scan disturb my systems?
Active Scanning and Deep Scanning interact directly with your services, so choose a preset deliberately; see Scans and runs.
Plans
Some scan options depend on your plan; see pricing.
Did this answer your question?
GRC / compliance
The GRC / compliance module shows where you stand against the frameworks you are held to, such as ISO 27001, NIST CSF, SOC 2 and Essential Eight, proves it with evidence, and reports it.
Identity exposure & dark-web monitoring
The Identity exposure module finds leaked credentials, breached passwords and exposed account addresses tied to your domain, for you to resolve once the account is secured.