Your attack surface is a moving target. As your business expands and contracts, so does your technology landscape.
Whether you are spinning up a new system for testing purposes, divesting a business unit or service line, making a significant change to your production systems, or an unauthorized change has occured, your business needs to remain breach resilient.
The following steps will help you reduce your attack surface:
- Discovery of your brands, domains, subdomains, networks, applications, and services.
- Analysis of externally facing systems, applications, and services. Visualize both your known and "unknown" attack surface and remove "risky" and "unused" ports and services.
- Triage vulnerability indicators and evaluate the probability of exploitation.
- Validate the severity of discovered vulnerabilities with exploitation.
- Re-test exploitable vulnerabilities to confirm the risk has been fixed or mitigated.