October 2026
-
Third-Party Subdomain Discovery: Who Owns What
Third-party subdomain discovery finds the vendor-hosted names on your domain, shows who patches them and which can be hijacked. See how to map yours.
-
EASM vs Vulnerability Scanning: Which to Buy First
EASM vs vulnerability scanning: what each control finds, where they overlap, and which one to fund first on a tight budget. See how to decide.
-
Continuous Threat Exposure Management: 5 Stages
Continuous threat exposure management explained stage by stage, with the external gaps most programmes miss. See where CTEM usually stalls.
-
NCSC Disruptive Attack Guidance: The External Gaps
NCSC disruptive attack guidance tells you to prepare, but not how to map your internet-facing estate. See the external gaps to close first.
-
Attack Surface Management: What It Costs You
Attack surface management costs more than a licence. See the four real cost lines, what an unmanaged external estate costs instead, and where to start.
-
How to Find Forgotten Internet-Facing Assets for Free
Find forgotten internet-facing assets using free sources: certificate logs, DNS, WHOIS and billing records. See how to run your first sweep.
-
Exposed Telnet Servers: How to Find and Close Them
Exposed telnet servers hide on forgotten kit and supplier-managed devices. See how to discover yours from a seed domain, confirm it and shut port 23 safely.
-
Cyber Security and Resilience Bill: What to Fix First
Cyber Security and Resilience Bill duties start with knowing your internet-facing estate. See the reporting clocks and what to fix first.