Understanding ASM (Attack Surface Management)

Edgescan's ASM minimizes digital exposure by identifying, monitoring, and securing organizational assets to reduce vulnerabilities and risk.

Version Number: v1.0.0

Published Date: 31 July 2024

____________________________________________________________________________

ASM is a solution focused on identifying, inventorying, and securing all the digital assets that an organization exposes to potential attackers. This includes not only the known assets but also unknown, unmanaged, or potentially insecure assets across on-premise, cloud, and third-party environments.

The goal is to minimize vulnerabilities and reduce the overall risk by continuously discovering, monitoring, and analysing the attack surface for exposures, misconfigurations, and other security weaknesses. ASM enables organizations to gain visibility into their external digital footprint, understand their security posture, and prioritize remediation efforts based on the risk associated with each asset.

The default setup for ASM is to run continuously and discovery will look for the top 1000 TCP services running on any given host. ASM assessments will typically complete and refresh your dataset once every 4 hours.