External-system inventory
Inventory external leads from websites, business systems, test environments and historical projects.
Guanyuan Fengxun
External Attack Surface Management (EASM)
From asset discovery to risk closure
From asset discovery to risk closure
Guanyuan Fengxun connects target management, asset inventories, risk records, remediation and reporting to maintain an ongoing record of an enterprise’s external attack surface.
Use cases
For external asset inventories, change tracking and remediation
Ongoing change tracking
Use scheduled comparisons to let security and operations teams verify asset additions, changes and removals.
Remediation handover & reporting
Coordinate scoped checks with owners, deadlines, verification evidence and reporting materials.
From defined scope to documented resolution
Checks are organized around an explicit scope. Results depend on reachability, task configuration and connected sources; asset ownership and risk conclusions require business verification.
- Define scope
Define authorized targets and management scope.
- Discover assets
Collect discoveries and potential shadow assets.
- Verify ownership
Separate managed assets from associations requiring verification.
- Check & remediate
Link risks with owners, remediation and verification.
- Report & follow up
Report findings and track asset changes.
Checks are organized around an explicit scope. Results depend on reachability, task configuration and connected sources; asset ownership and risk conclusions require business verification.
Product capabilities
Multi-source discovery & targets
Connect asset sources according to configuration and authorization, and organize discoveries around defined targets.
Ownership & asset inventory
Separate in-scope assets from possible associations; use registration, certificates, domains and page information to verify ownership and maintain inventory context.
Change tracking & evidence
Track additions, changed attributes and disappearing assets through scheduled tasks, retaining timestamps, before-and-after values and screenshots.
Attack surface visualization
Complement inventories with globe and relationship views of targets, domains, hosts and risk records.
Risk records & remediation
Track confirmation, assignment, remediation, verification and closure with owners, deadlines, explanations and verification evidence.
Reports & collaboration
Export Word, Excel and Markdown reports with assets, risks, IP context and screenshot indexes for handovers and periodic reporting.
Deployment & services
Define implementation scope around authorized targets, connected data sources and task configuration. Confirm ownership and risk conclusions with the business, and discuss deployment requirements and demonstrations with our team.
Talk to us about business fit, product demonstrations and implementation.