[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:attack-surface-management":3},{"control":4,"products":25,"stories":90,"lessons":134,"related":159,"compare":171},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.","Continuous discovery of everything your organisation exposes to the internet, including shadow IT, old test servers and systems of subsidiaries, with alerts when something new or risky appears.","Many incidents start on a system the security team did not know existed. Attackers scan the whole internet within hours of a new exploit. EASM gives you the same view of your own perimeter first, so an emergency patch reaches every exposed system.",[11,12,13,14],"How does it discover assets: DNS, certificates, IP ranges, cloud accounts?","Does it cover subsidiaries and acquired companies?","How quickly does it flag a newly exposed system?","Does it confirm exploitability, or only list open ports and versions?","Risk: unknown internet-facing systems are exploited after a new vulnerability is published. Control: continuous external attack surface discovery with an owner for every asset. Owner: security operations lead. Measure: exposed assets without a known owner.",[17,18,19,20],"NIS2 Art. 21(2)(i): asset management","DORA Art. 8: identification of ICT assets","CIS Control 1: inventory of enterprise assets","ISO\u002FIEC 27001:2022 A.5.9: inventory of information and assets",{"name":22,"slug":23},"Vulnerability Management","vulnerability-management","2026-10-16T12:48:07.651852+00:00",[26,34,42,50,58,66,74,82],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"censys","Censys","\u002Fvendor-logos\u002Fcensys.png","censys-external-exposure-management","Censys External Exposure Management","https:\u002F\u002Fcensys.com\u002Fsolutions\u002Fexternal-exposure-management","External attack surface discovery based on continuous internet-wide scanning.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"detectify","Detectify","\u002Fvendor-logos\u002Fdetectify.png","surface-monitoring","Detectify Surface Monitoring","https:\u002F\u002Fdetectify.com\u002Fproduct\u002Fsurface-monitoring","Continuous discovery and testing of internet-facing subdomains and services.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"outpost24","Outpost24","\u002Fvendor-logos\u002Foutpost24.png","outpost24-easm","Outpost24 EASM","https:\u002F\u002Foutpost24.com\u002Fproducts\u002Fexternal-attack-surface-management\u002F","Discovery and risk assessment of internet-facing assets.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xpanse","Cortex Xpanse","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xpanse","External attack surface discovery and remediation.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","attack-surface-intelligence","Attack Surface Intelligence","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fattack-surface-intelligence","External attack surface management that discovers internet-facing assets and prioritises their exposures.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png","watchtowr-platform","watchTowr Platform","https:\u002F\u002Fwatchtowr.com\u002Fplatform\u002F","Continuous discovery of internet-facing assets, with automated testing for exploitable vulnerabilities.",{"total":91,"last_days":92,"recent":93},188,53,[94,99,104,109,114,119,124,129],{"slug":95,"title":96,"published_at":97,"brief":98},"hackers-exploit-exposed-geovision-cctv-software-to-disable-defender-and-deploy-c-cfe37d","Hackers exploit exposed GeoVision CCTV software to disable Defender and deploy cryptominers","2026-11-13T14:05:30+00:00","Hackers exploit exposed GeoVision CCTV software to disable Defender and deploy cryptominers.",{"slug":100,"title":101,"published_at":102,"brief":103},"2026-020-critical-vulnerabilities-in-citrix-netscaler-adc-and-netscaler-gateway-224c81","2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway","2026-11-12T17:20:53+00:00","Citrix NetScaler ADC and Gateway have 28 memory flaws, including a critical CVE-2026-120868 affecting all deployments.",{"slug":105,"title":106,"published_at":107,"brief":108},"new-n-central-exploits-work-against-patched-servers-enable-root-rce-and-windows-e8aac6","New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access","2026-11-12T11:51:43+00:00","New N-central exploits target patched servers, enabling root RCE and Windows SYSTEM access.",{"slug":110,"title":111,"published_at":112,"brief":113},"artex-and-ai-powered-red-teaming-tools-what-defenders-need-to-know-b7b40a","ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to Know","2026-11-11T23:00:53+00:00","Attackers are using AI-powered red teaming tools like ARTEX and CyberStrikeAI for autonomous offensive operations.",{"slug":115,"title":116,"published_at":117,"brief":118},"ai-hacking-frameworks-like-artex-pentagi-and-agent-zero-found-running-on-interne-0a53e4","AI Hacking Frameworks Like ARTEX, PentAGI, and Agent Zero Found Running on Internet-Accessible Servers","2026-11-11T17:07:39+00:00","AI hacking frameworks found exposed on internet-accessible servers.",{"slug":120,"title":121,"published_at":122,"brief":123},"grok-ai-app-builder-exposes-over-35-000-apps-leaking-confidential-business-data-8bf44d","Grok AI App Builder Exposes Over 35,000 Apps, Leaking Confidential Business Data and Passwords","2026-11-11T12:17:14+00:00","Grok AI app builder exposes 35,578 public apps with confidential business data, passwords, and patient information.",{"slug":125,"title":126,"published_at":127,"brief":128},"hackers-abuse-refrigeration-controllers-to-send-spam-and-route-proxy-traffic-a2d706","Hackers abuse refrigeration controllers to send spam and route proxy traffic","2026-11-09T14:54:01+00:00","Hackers exploit internet-connected refrigeration controllers for spam botnets and proxy services.",{"slug":130,"title":131,"published_at":132,"brief":133},"inside-artex-ai-hacking-tools-exposed-servers-and-south-korean-bank-breaches-162e2e","Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches","2026-11-07T19:56:18+00:00","ARTEX AI hacking tools used in South Korean bank breaches affecting 67k people and 2.2k corporations.",[135,139,143,147,151,155],{"slug":136,"title":137,"published_at":138},"critical-citrix-netscaler-flaws-demand-immediate-patching-of-internet-facing-appliances","Critical Citrix NetScaler Flaws Demand Immediate Patching of Internet-Facing Appliances","2026-11-12T18:20:18.918+00:00",{"slug":140,"title":141,"published_at":142},"ai-powered-red-teaming-tools-like-artex-lower-the-bar-for-autonomous-attacks","AI-Powered Red Teaming Tools Like ARTEX Lower the Bar for Autonomous Attacks","2026-11-12T00:20:48.496+00:00",{"slug":144,"title":145,"published_at":146},"ai-hacking-tools-left-exposed-online-without-authentication","AI Hacking Tools Left Exposed Online Without Authentication","2026-11-11T18:21:01.212+00:00",{"slug":148,"title":149,"published_at":150},"grok-ai-platform-exposes-35000-apps-via-insecure-default-access-settings","Grok AI Platform Exposes 35,000+ Apps via Insecure Default Access Settings","2026-11-11T13:21:21.727+00:00",{"slug":152,"title":153,"published_at":154},"exposed-refrigeration-controllers-hijacked-for-spam-and-proxy-botnets","Exposed Refrigeration Controllers Hijacked for Spam and Proxy Botnets","2026-11-09T15:20:21.516+00:00",{"slug":156,"title":157,"published_at":158},"ai-powered-artex-framework-breaches-seven-south-korean-banks-via-exposed-servers","AI-Powered ARTEX Framework Breaches Seven South Korean Banks via Exposed Servers","2026-11-07T20:20:22.382+00:00",[160,163,167],{"slug":23,"name":161,"problem":162},"Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":164,"name":165,"problem":166},"penetration-testing","Penetration testing and bug bounty","Someone friendly finds the holes before someone hostile does.",{"slug":168,"name":169,"problem":170},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",{"outpost24\u002Foutpost24-easm":172,"palo-alto-networks\u002Fcortex-xpanse":180,"censys\u002Fcensys-external-exposure-management":198,"detectify\u002Fsurface-monitoring":205,"watchtowr\u002Fwatchtowr-platform":211,"holm-security\u002Fholm-security-platform":219,"runzero\u002Frunzero-platform":226,"recorded-future\u002Fattack-surface-intelligence":235},{"hq_country":173,"also_provides":174,"reviews":175,"affected":179,"reported":179},"SE",[],[176],{"label":177,"url":178},"Gartner Peer Insights: Outpost24 Exposure Management Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Foutpost24-exposure-management-platform",0,{"hq_country":181,"also_provides":182,"reviews":183,"affected":196,"reported":197},"US",[],[184,187,190,193],{"label":185,"url":186},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":188,"url":189},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":191,"url":192},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"label":194,"url":195},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",22,43,{"hq_country":181,"also_provides":199,"reviews":200,"affected":179,"reported":204},[],[201],{"label":202,"url":203},"Gartner Peer Insights: Censys Attack Surface Management user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcensys-attack-surface-management",3,{"hq_country":173,"also_provides":206,"reviews":207,"affected":179,"reported":179},[],[208],{"label":209,"url":210},"Gartner Peer Insights: Detectify Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fdetectify-platform",{"hq_country":212,"also_provides":213,"reviews":214,"affected":179,"reported":218},null,[],[215],{"label":216,"url":217},"Gartner Peer Insights: watchTowr Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fwatchtowr-platform",27,{"hq_country":173,"also_provides":220,"reviews":222,"affected":179,"reported":179},[221],{"slug":23,"name":161},[223],{"label":224,"url":225},"Gartner Peer Insights: Holm Security Next-Gen Vulnerability Management user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fholm-security-next-gen-vulnerability-management",{"hq_country":181,"also_provides":227,"reviews":231,"affected":179,"reported":179},[228],{"slug":229,"name":230},"asset-inventory","Cyber asset inventory",[232],{"label":233,"url":234},"Gartner Peer Insights: runZero user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Frunzero-1617732381",{"hq_country":181,"also_provides":236,"reviews":237,"affected":179,"reported":244},[],[238,241],{"label":239,"url":240},"Gartner Peer Insights: Recorded Future Intelligence Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Frecorded-future-intelligence-platform",{"label":242,"url":243},"PeerSpot: Recorded Future user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Frecorded-future-reviews",7]