Attack Surface Management Overview

Oneleet ASM automates the discovery and assessment of everything you expose to the internet. Rather than relying on periodic scans that can miss temporary or newly created assets, it runs continuously in the background, detecting exposures as they appear and providing complete visibility whenever you need it.

Asset Discovery

We automatically discover internet-facing assets, including domains, subdomains, IP addresses, open ports, web applications, TLS certificates, DNS records, cloud endpoints, APIs, and the underlying technologies that run them.

Each asset and finding includes contextual metadata that presents your attack surface through an attacker’s lens, so you can prioritize remediation efforts and make informed decisions about whether an asset should’ve been public in the first place.

Managing multiple assets

In Attack Surface → Assets, select individual web assets or use a domain’s checkbox to select its assets. Select all includes the loaded assets that match your current filters. Load more assets before selecting all if you need to include additional results. You can deselect endpoints you want to keep before taking an action.

• Archive selected removes the selected assets from the active inventory and excludes them from future scans. Review the asset list before confirming. Their history and findings are preserved; use the Archived filter and open an asset’s details to restore it. Archiving requires an administrator.
• Scan selected requests one vulnerability scan for the selected assets. Automatic scans must be enabled for every selected asset. Review the targets before confirming, then follow progress in the Scans tab.

Removing a configured target doesn’t remove previously discovered assets from the inventory. Archive retired web assets when you no longer want them in your active inventory. These bulk actions apply to web services grouped by domain; other discovered asset types have their own controls.

Continuous Monitoring

Continuous monitoring detects new deployments, changes to existing assets, and assets that were intended to be private but became publicly exposed due to configuration or deployment accidents. By capturing attack surface changes as they appear, you will always have an up-to-date view of your attack surface and can respond immediately to new risks instead of relying on periodic, and potentially outdated, snapshots.

Security Assessments

Assessments are based on attacker-inspired tactics and techniques to identify risks such as outdated software, misconfigured systems, exposed tokens and secrets, weak credentials, exposed sensitive services, and domains that can be taken over.

New vulnerability disclosures, zero-day advisories, and active mass-exploitation campaigns are cross-referenced against your live inventory to show exactly where you’re exposed. With an always-up-to-date asset inventory and precise vulnerability detection, Oneleet ASM shortens your window of exposure when threat intelligence surfaces a new risk.

Getting Started

Getting started takes just a few minutes, and Oneleet ASM immediately begins building your asset inventory and delivering actionable findings. With no complex setup and insights that directly improve your security posture, ASM delivers inherent risk reduction on its own, while also providing the visibility needed to decide what additional security controls make sense. It is one of the highest-ROI controls to implement early in your security program.