Get in touch DEEN
Managed service · Attack Surface Monitoring

Your attack surface changes.
We keep it in view all year round.

Continuous discovery from the outside, ongoing assessment and alerts on new risks, non-invasive and operated by us.

Get in touch

Discover, prioritise, mitigate.

Continuous discoveryNew domains, subdomains, IP addresses, services and cloud resources — found as soon as they become reachable from outside.
Attributed and validatedEvery asset is attributed to your company and validated before it enters the assessment.
Changes with historyWhat appears, what disappears, what changes — traceable over time.
Vulnerability scans with GrayEVAOn request and with your approval, we actively scan the confirmed assets for vulnerabilities with GrayEVA, prioritised by EPSS, CVSS, KEV and exploit data — with concrete mitigation measures for each vulnerability.
Leaked credentialsCredentials tied to your domains that surface in data leaks — reported as soon as they become known.
Suppliers on requestOn request we also monitor the external attack surface of critical suppliers — relevant for NIS2 Art. 21(2)(d).

Three routes, one data basis.

The same discovery, the same assessment — you decide whether you want a report, the ongoing service or access to the platform.

ONE-OFF

External Attack Surface Assessment

A snapshot with a result report for management, the security team and audit — with no ongoing contract. The usual way in.

MANAGED SERVICE

Attack Surface Monitoring

We run the monitoring for you: onboarding, ongoing assessment, regular reports and alerts.

SAAS

Platform access

For teams that want to run the monitoring themselves. Availability and terms on request.

We run it. You get results.

  • Onboarding: discovery and attribution of your externally reachable assets, reconciliation with your inventory, definition of the scope
  • Ongoing re-discovery of the confirmed assets and comparison against the last state
  • Reports with the asset inventory, new and closed findings, prioritisation by EPSS, CVSS and KEV, and the trend over time
  • Alerts on new discoveries, status changes and leaked credentials
  • Review sessions to walk through and prioritise findings with your team

Reporting frequency, assessment depth and alerting follow the agreed service level.

FAQ

Frequently asked questions

Do we need a security team of our own?

No. We run the monitoring. You receive reports and alerts and discuss the results with us.

How does the monitoring access our systems?

It does not. Discovery happens from the outside and non-invasively: no exploitation of vulnerabilities, no credentials, no access to your internal network.

What does the service cost?

Scope and service level depend on the number of validated assets and are agreed separately. We provide the pricing and billing model on request.

Can subsidiaries and suppliers be included?

Yes. We define entities and their domains during onboarding. On request we monitor the external attack surface of critical suppliers as well.

Let us talk about your scope.

Tell us the domains you want monitored. From those we determine the externally reachable assets and propose a scope and service level.

Get in touch
Good to know

Prefer to start with an inventory?

That is a good start too. The one-off assessment delivers a report for management, security team and audit, and a baseline that monitoring later builds on.

More on the attack surface assessment →