[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5_EkKN7vrPe0T6dSLhogZHQjSmmfdE8lavuPYRLi5yw":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":131},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"a807a1d2-03f4-42f8-a234-a71b7a96e550","Novee puts forgotten internet-facing assets through penetration testing","novee-puts-forgotten-internet-facing-assets-through-penetration-testing-317162","Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities. It tests newly disclosed CVEs and findings imported from third-party external attack surface management (EASM) tools. “Attackers don’t limit themselves to the applications you’re already testing. They look for anything exposed to the internet – forgotten subdomains, staging servers left online, and infrastructure your team may not even know exists. … More → The post Novee puts forgotten internet-facing assets through penetration testing appeared first on Help Net Security.","Novee has launched External Surface Testing, a new feature for its AI penetration testing platform. This capability helps security teams discover and validate exploitable vulnerabilities on internet-facing assets, including those that might be forgotten or unknown. The tool tests newly disclosed CVEs and findings from EASM tools, providing prioritized remediation guidance.","Novee's AI platform adds External Surface Testing to find forgotten internet assets and validate vulnerabilities.","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2026\u002F11\u002F03\u002Fnovee-external-surface-testing\u002F","https:\u002F\u002Fimg.helpnetsecurity.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002F03082853\u002Fnovee-eternal-surface-testing.webp","2026-11-03T14:00:26+00:00","2026-11-03T15:00:13.035978+00:00",7,[17,20,23,26],{"name":18,"type":19},"External Surface Testing","product",{"name":21,"type":22},"Novee","vendor",{"name":24,"type":25},"AI penetration testing","technology",{"name":27,"type":25},"External Attack Surface Management (EASM)","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":28,"icon":30,"name":31,"slug":32},null,"Tools","tools",[34,36,41],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":49,"vendors":130},[50,79,101],{"slug":51,"name":52,"problem":53,"products":54},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":80,"name":81,"problem":82,"products":83},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[84,85,93],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"censys","Censys","\u002Fvendor-logos\u002Fcensys.png","censys-external-exposure-management","Censys External Exposure Management","https:\u002F\u002Fcensys.com\u002Fsolutions\u002Fexternal-exposure-management","External attack surface discovery based on continuous internet-wide scanning.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"detectify","Detectify","\u002Fvendor-logos\u002Fdetectify.png","surface-monitoring","Detectify Surface Monitoring","https:\u002F\u002Fdetectify.com\u002Fproduct\u002Fsurface-monitoring","Continuous discovery and testing of internet-facing subdomains and services.",{"slug":102,"name":103,"problem":104,"products":105},"penetration-testing","Penetration testing and bug bounty","Someone friendly finds the holes before someone hostile does.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"yeswehack","YesWeHack","\u002Fvendor-logos\u002Fyeswehack.png","yeswehack-bug-bounty","YesWeHack Bug Bounty","https:\u002F\u002Fwww.yeswehack.com\u002F","Bug bounty, vulnerability disclosure and pentest management.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"hackerone","HackerOne","\u002Fvendor-logos\u002Fhackerone.png","pentest","HackerOne Pentest","https:\u002F\u002Fwww.hackerone.com\u002Fproduct\u002Fpentest","Penetration testing delivered by vetted researchers.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"safebreach","SafeBreach","\u002Fvendor-logos\u002Fsafebreach.png","safebreach-propagate","SafeBreach Propagate","https:\u002F\u002Fwww.safebreach.com\u002Fpropagate-attack-path-validation\u002F","Automated penetration testing that emulates lateral movement, privilege escalation and credential harvesting to show how far a breach could spread.",[],{"slug":132,"title":133,"body":134,"framework_refs":135,"framework_notes":143},"forgotten-internet-facing-assets-create-exploitable-blind-spots","Forgotten Internet-Facing Assets Create Exploitable Blind Spots","Organizations frequently lose track of internet-facing assets over time — legacy systems, test environments, and shadow IT infrastructure that were never properly decommissioned or documented. These forgotten assets often go unpatched and unmonitored, making them prime targets for attackers who routinely scan the internet for exposed, vulnerable services. Novee's External Surface Testing tool highlights a critical gap: if your security team doesn't know an asset exists, it will never be included in vulnerability management cycles. This matters because attackers don't need an invitation — newly disclosed CVEs are weaponized within hours, and unknown assets are unlikely to receive emergency patches. Continuous external attack surface management combined with automated penetration testing is now essential to close this visibility gap.",[136,137,138,139,140,141,142],"CIS Control 1: Inventory and Control of Enterprise Assets","CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIS2 Article 21(2)(b)","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control",{"NIS2 Article 21(2)(b)":144,"NIST SP 800-53 SI-2: Flaw Remediation":145,"OWASP A06:2021 Vulnerable and Outdated Components":146,"CIS Control 7: Continuous Vulnerability Management":147,"CIS Control 1: Inventory and Control of Enterprise Assets":148,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":149,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":150},"NIS2 requires entities to implement measures for incident handling and risk management including asset visibility; unmanaged external assets undermine the baseline security posture NIS2 mandates for operators of essential services.","SI-2 requires organizations to identify, report, and correct information system flaws — a process that only works if all internet-facing assets are known and included in the remediation workflow.","Forgotten internet-facing assets are disproportionately likely to run outdated, unpatched components that match this risk category, making them easy targets for automated exploitation of known CVEs.","Unknown assets are excluded from vulnerability scanning cycles, meaning newly disclosed CVEs go undetected on them; CIS Control 7 requires continuous scanning of all in-scope assets including those on the external perimeter.","Forgotten internet-facing assets persist precisely because no authoritative inventory exists; CIS Control 1 mandates continuous discovery and tracking of all assets to eliminate unknown exposures.","This control explicitly requires organizations to obtain timely information about technical vulnerabilities in all assets they operate and to take appropriate measures, which presupposes a complete and current asset inventory.","Forgotten external assets often lack proper access controls and authentication hardening; the Protect function of the CSF requires that all managed assets have appropriate protective measures applied, which is impossible without full asset visibility."]