Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.
Dark Radar Attack Surface Management makes your organisation's digital assets, externally exposed services, technologies in use and vulnerabilities visible on one platform. Continuously assess your attack surface, from domains to IP addresses and from open ports to CVE records. Measure your security posture, identify critical risks and manage remediation.
Attack Surface Management
Key features
Digital asset inventory
See your organization's digital assets in one inventory.
View your verified domains, subdomains and IP addresses in a central inventory. Bring the digital assets related to your organisation into one view to define the extent of your attack surface.
Service and port discovery
Identify externally exposed services on your digital assets.
Review the services and open ports running on your domains and IP addresses. See each asset's ports and reachable services to assess your externally exposed infrastructure.
Technology and version detection
See which technologies run in your infrastructure.
Review the software, technologies and versions used on your digital assets. Make your technology inventory visible to identify outdated components and potential security risks.
Vulnerability and CVE tracking
Assess vulnerabilities by severity and likelihood of exploitation.
Track CVE records related to your assets from one place. Review each vulnerability's severity, active exploitation status and EPSS probability. Prioritise technical risks by likelihood of exploitation as well as severity.
Security posture
Assess your organisation's security level with combined risk indicators.
View your security posture score, which combines leak, vulnerability, external attack surface and brand security components. Bring findings from different security areas under one assessment and track your organisation's overall risk picture.
Risk remediation and tracking
Rank issues by priority and track remediation.
Rank vulnerabilities and weaknesses by severity. Define the remediation steps for each risk and track their resolution. Run security management from discovery to assessment and from assessment to remediation on one platform.
Included in
- Free planNot included
- EssentialNot included
- ProfessionalNot included
- Intelligence 360Included
Frequently asked questions
It discovers subdomains, IP addresses, open ports and services, technologies in use and certificates related to your verified domains.
Subdomains and IP addresses are collected from public sources such as DNS and certificate records. Open ports and services are identified by scanning, only on verified domains.
You verify your domain with a DNS TXT record or a meta tag added to your website. Scanning runs only on verified domains and their related assets.
Yes. Subdomains and IP addresses that are not in your inventory are listed when discovered. This lets you see forgotten or unrecorded systems.
Each vulnerability is shown with its CVE number, affected asset, technology and version, severity, active exploitation status and EPSS probability of exploitation.
Severity, active exploitation status and EPSS probability of exploitation are assessed together. Actively exploited vulnerabilities are flagged separately.
Subdomain and IP discovery uses public sources. Port and service scanning runs only on verified domains and with your approval; it does not start on its own.
The security posture score ranges from 0 to 100 and has four components: leaks, vulnerabilities, external attack surface (email security and certificate status) and brand security. A component without measurements is left out of the score. The score is shown with an A–F grade, and you can see which findings affect each component.
Know your digital footprint. Manage your risks. Keep your attack surface under control.
With Dark Radar, discover your organisation's digital assets, assess technical security weaknesses and keep improving your security posture.
Start with your domain