← All Services
Assessment and validation
External Attack Surface Review
Clarify the exposure your organization owns.
Request This Service →01 / Purpose
What this service solves
Internet-facing exposure review across domains, known assets, provider boundaries and ownership truth.
Outcomes
Clarify the exposure your organization owns.
The engagement brief establishes deliverables, responsibilities and acceptance criteria for your scope.
02 / Scope
Build around your environment.
Share known domains, subsidiaries, cloud tenants, expected asset ownership and exclusion rules.
Capabilities in scope
Scope is tailored to the following areas:
- Owned domains and brands
- Known internet-facing assets
- Subsidiaries included
- Provider or third-party boundaries
Relevant technologies & environments
- Which internet-facing domains and brands are owned?
- Are subsidiaries or acquired environments included?
- Which provider or third-party assets must be treated separately?
03 / Delivery
A clear path to engagement.
- Share your context
Describe your objectives, systems and current controls.
- Agree the boundaries
Review technical scope, authorization, access and delivery constraints.
- Confirm the engagement
Agree responsibilities, timing and expected outputs before work begins.