External Attack Surface
See what attackers see from outside.
We find domains, subdomains, open services and certificates that belong to your organisation and assess them from an attacker's point of view.
Exposure score
55/ 100
4open
1critical
1exploited
| Prio | Finding | Asset | Severity |
|---|---|---|---|
| 94 | Citrix NetScaler session token leak (Citrix Bleed)EXPLOITED | vpn.example.com | Critical |
| 56 | RDP port 3389 reachable from the internet | vpn.example.com | High |
| 34 | Staging subdomain exposed without authentication | dev.example.com | Medium |
■ External Attack Surface
What the service does
01
Automatic discovery
Starting from your main domain, related domains, IP ranges and cloud services are found.
02
Forgotten systems
Test environments, old campaign sites and shadow IT become visible before someone else finds them.
03
Certificates and DNS
Expiring certificates, weak TLS configuration and dangling DNS records in view.
04
Change alerts
New open ports or services trigger an alert right away.
■ Sample data. No real systems, no real scans.
Typical findings
This is what results look like: every finding with priority, affected system and severity. What should be closed first is at the top.
| Prio | Finding | Asset | Severity |
|---|---|---|---|
| 94 | Citrix NetScaler session token leak (Citrix Bleed)EXPLOITED | vpn.example.com | Critical |
| 56 | RDP port 3389 reachable from the internet | vpn.example.com | High |
| 34 | Staging subdomain exposed without authentication | dev.example.com | Medium |
| 34 | TLS certificate expires in 9 days | mail.example.com | Medium |
■ Free first scan
What does your attack surface look like?
We scan your external attack surface for free and walk you through the results in 30 minutes.