-
How to Find Forgotten Internet-Facing Assets for Free
Find forgotten internet-facing assets using free sources: certificate logs, DNS, WHOIS and billing records. See how to run your first sweep.
-
Exposed Telnet Servers: How to Find and Close Them
Exposed telnet servers hide on forgotten kit and supplier-managed devices. See how to discover yours from a seed domain, confirm it and shut port 23 safely.
-
Cyber Security and Resilience Bill: What to Fix First
Cyber Security and Resilience Bill duties start with knowing your internet-facing estate. See the reporting clocks and what to fix first.
-
Certificate Transparency Logs: Subdomain Discovery Gaps
Certificate transparency logs surface subdomains fast but miss plenty. See what CT reveals, what it hides, and how to verify every candidate.
-
How EASM Discovers Assets: Seed to Inventory
How EASM discovers assets: from one seed domain through certificate logs, DNS and RDAP to a checked inventory. See where the method falls short.
-
NCSC Patch Wave: An External Readiness Checklist
NCSC patch wave prep starts outside the firewall: find unknown internet-facing assets, triage likely-affected hosts fast and cut noise. See how.
-
External Attack Surface Management: 9 Costly Errors
External attack surface management fails in practice for nine specific reasons, from narrow seeds to ignored dangling DNS. See the fixes for each.
-
Internet-Facing Asset Inventory: 7 Fields to Record
Build an internet-facing asset inventory that holds up: the 7 fields every record needs, how to confirm candidates and keep it current. See the full list.
-
Choosing an EASM Product: A Practical Checklist
Start from your objective, then check how it discovers, how fresh its data is, how it prioritises, what it covers beyond CVEs, whether you need active testing, and…
-
EASM Versus Vulnerability Scanning: Likely Versus Definitely
EASM observes from the outside and tells you a system is likely affected; a scanner tests and tells you whether it definitely is. They are partners, not substitutes.