External Attack Surface Management

Attack surface management is a continual process of identifying, cataloguing, evaluating, and remediating the cyber security of an organisation’s externally facing digital assets.

Using passive scanning technologies (making it legal to scan anyone without permission) Hexiosec ASM uses an IP address or URL to identify your online assets, discover the associated risks, and provides a host of remediation tools and details to fix these issues.

With a free account you can scan and monitor 1 domain, with scans refreshed once a week. You can also pull “Summary Reports” and get notified via email when new risks are identified in your attack surface.

Being designed and built in-house in Cheltenham, UK, enables us to constantly update and improve our attack surface scanner’s capability. This constant evolution combined with market leading pricing, decades of cyber security experience, and cutting-edge technology gives us a solution that stands out in a crowded marketplace.

Yes, all plans give you the option to export Summary Reports to PDF, giving you a high-level overview of the condition of your attack surface. Premium plans and above also support a detailed Risks and Actions report spreadsheet allowing you to easily share details with other teams or organisations. MSP and Enterprise plans can also export curated data from the app as a CSV file, further expanding the integration possibilities.

Yes, the API is available to Premium, Enterprise and MSP customers and includes both discovery data and data for your Risks and Actions. The full details of the API capabilities can be found in this documentation. We’re constantly improving the features and functionality of the API, as we look to further increase our integration capability.

Our paid subscription starts at just £99/month* for the Essential tier, you can find the full details of pricing plans and what’s included on the Pricing Page. *based on an annual contract.

Cyber security is a vast and complex concept and managing your risks from various different angles is key to ensuring a holistic approach. Hexiosec ASM gives you an outside-in view of your organisation which allows you to get a broad view of your organisation’s security perimeter. Many other tools focus on other areas of security (e.g. security inside your network, targeted, deep penetration testing) and an attack surface management tool like Hexiosec ASM is another vital piece of that cyber security puzzle. Read more about how the different security tools work together in our blog.

By understanding exactly where you are at risk you can take proactive steps to improve and defend those areas before they are exploited. Without a clear understanding of your digital infrastructure, it is impossible to ascertain where your biggest threats or exposures lie.

We have a regularly updated FAQ and documentation site that contains a variety of documents to help you get started with Hexiosec ASM. Within the app there are also in-built tips to make navigating around even easier. If you need more assistance we have a support team on hand, or for more complex issues we can provide cyber security services.

Without a clear understanding of what your attack surface or digital infrastructure looks like, it is impossible to defend. Scanning attacks look for weaknesses in your attack surface. Combine this with out-of-date or exposed assets and services and you could be blindsided by an attack. Recovering from an attack is far more expensive, both in terms of money and reputational damage, than preventing one.