Service · Cloud & Infrastructure Security
ENS HIGH · ISO 27001Attack Surface Management continuous control of external exposure
We discover internet-facing assets, identify real exposure and prioritise by impact. Then we close the loop with hardening, remediation guidance and revalidation to produce defensible, audit-ready evidence.
Coverage
DNS · Cloud · SaaS
Priority
Exposure-driven
Closure
Revalidation ✓
External exposure matrix
Domain
Subdomains
Discovery
Cloud
Endpoints
Internet-facing
TLS/DNS
Hygiene
Posture
Services
Ports
Exposure
Risk signals
impact-based prioritisation
Inventory
+assets
discovery
Exposure
↓
hardening
Closure
✓
revalidation
Inventory → exposure → remediation → evidence.
What the service covers
- Asset discovery: domains/subdomains, IPs, services, cloud endpoints, SaaS and shadow IT.
- External exposure: ports, banners, TLS posture, data leaks signals, repos, buckets and public endpoints.
- Impact-based prioritisation: asset criticality, internet-facing exposure, CVEs, misconfigurations and evidence.
- Perimeter hardening: WAF, reverse proxy, rules, allowlists, rate limiting and closing unnecessary services.
- TLS/DNS hygiene: expirations, CAA, SPF/DKIM/DMARC and certificate posture.
- Revalidation & evidence: before/after proof, tickets, owners and audit-ready traceability.
A defensible perimeter starts with knowing what you expose. We prioritise by impact and deliver an executable plan with traceability (and if you want, we implement it with your teams).
Deliverables
Attack surface map
Inventory of internet-facing assets, dependencies and suggested ownership.
Exposure report
Prioritised findings (P0–P3): misconfigurations, exposed services and associated risk.
Remediation plan
Actionable backlog with quick wins, dependencies and a sequence to reduce exposure fast.
Revalidation pack
Post-change verification plus evidence exports/screenshots to demonstrate control.
Recommended KPIs
Metrics to govern external exposure and demonstrate measurable risk reduction.
Unknown assets
Shadow IT and untracked assets discovered and classified.
Public exposure
Reduction of exposed services/ports and recurring misconfigurations.
TLS/DNS hygiene
Certificates up to date, DNS policies, and email security posture (SPF/DKIM/DMARC).
Time to close
Exposure MTTR: from finding to revalidated remediation.
How we work
-
Step 1
Baseline
Domains, cloud, ranges, criticality and impact criteria.
-
Step 2
Discovery
Assets, exposure, public signals and dependencies.
-
Step 3
Prioritization
P0–P3 by risk, criticality, effort and quick wins.
-
Step 4
Closure
Hardening/remediation + revalidation + evidence.
FAQ
Is this the same as penetration testing?
Not exactly. ASM/EASM continuously discovers and controls exposure (inventory + posture + prioritisation). Penetration testing validates exploitation depth on a scoped target. They are complementary.
Does it include cloud and SaaS?
Yes. We cover cloud-facing assets (IPs, endpoints, storage), DNS, domains/subdomains and public signals linked to SaaS and third parties.
How often should we review the attack surface?
One-time baseline or recurring (monthly/quarterly) depending on criticality and change velocity. The key is keeping inventory current and revalidating after changes.
What do you need to get started?
Primary domains, IP ranges (if applicable), read-only cloud access (ideal), and a contact to validate ownership and help with tickets/remediation workflows.
Technical complement
A passive external snapshot of your domain in 60 seconds
Before starting the managed ASM programme, you can run Hard2bit Scanner on your domain — or on a vendor's — for a passive baseline (DNS/TLS posture, public exposure, external signals). It does not replace the managed service, but accelerates the first conversation.
Provider's operating framework
We run the ASM programme inside our own ISMS audited against ENS HIGH category and ISO/IEC 27001:2022, plus four additional ISOs (22301, 20000-1, 9001, 14001). Discovery, posture and remediation evidence is kept aligned with international frameworks and is reusable by clients subject to DORA, NIS2 or ENS in their own audits. The ENS HIGH certification belongs to Hard2bit as a provider; it does not replace the client's own certification.
Related services
Natural pairings with the ASM programme
Pillar
Cloud & Infrastructure Security
Cluster this service belongs to.
Service
Third-Party Risk Management (TPRM)
Extends ASM to the perimeter of your critical vendors.
Service
Vulnerability management
Complementary technical layer for exposure control.
Service
Pentesting
Validates real-world exploitability of prioritised findings.
Want to reduce external exposure across your environment?
We baseline, prioritise by impact and close gaps with revalidation and audit-ready evidence.