GrayScope ist unsere Lösung für Angriffsflächen-Monitoring nach den Prinzipien des Continuous Threat Exposure Management (CTEM). Sie erkennt, erfasst und überwacht Ihre extern sichtbare IT-Landschaft, also Domains, IPs, Dienste und Webanwendungen, kontinuierlich und vollständig passiv.

Greift GrayScope in meine Systeme ein?

Nein. GrayScope arbeitet rein passiv und nicht-invasiv aus der Außenperspektive — keine internen Zugriffe, kein Eingriff in Ihre Systeme. Erkannte Assets werden Ihnen vor jeder weiteren Erkennungsrunde eindeutig zugeordnet — das hält die Erkennung sauber und rechtssicher.

Wie schnell sehe ich erste Ergebnisse?

Sie geben Startpunkte vor, etwa Domain, IP-Bereich oder ASN. Ein erstes Inventar Ihrer von außen erreichbaren Assets entsteht binnen weniger Minuten; danach erweitert ein iterativer Kreislauf das Bild kontinuierlich — statt eines einmaligen Scans.

Wie priorisiert GrayScope Risiken?

Nach realer Ausnutzbarkeit, ergänzt um den CVSS-Schweregrad. Aktiv ausgenutzte Schwachstellen stehen oben.

Brauche ich ein eigenes Security-Team?

Nicht unbedingt. Auf Wunsch betreiben wir GrayScope für Sie als Managed Service. Alarme und Tickets erreichen Sie über Ihre bestehenden Kanäle.

Deckt GrayScope auch Lieferanten ab?

Ja. Die Außen-Erkennung funktioniert genauso für die Angriffsfläche Ihrer Lieferanten — bevor deren Risiken zu Ihren werden.

Continuous Threat Exposure Management

GrayScope

GrayScope discovers, maps and monitors your externally visible IT landscape — domains, IPs, services, web applications — continuously and entirely passively. This applies to your own attack surface — and to your suppliers’, before their risks become yours.

Get in touch

Key capabilities

Continuous external discoveryConstantly finds what is reachable from outside — with no effort on your part.

Complete asset attributionIPs, domains, subdomains and cloud services — mapped to your organization.

Shadow IT & legacySurfaces the forgotten and unknown before someone else finds it.

Passive & non-invasiveWorks exclusively from the outside; your systems remain untouched.

Real-time + historyCurrent state with a timeline — changes become traceable.

Prioritized by real riskVulnerabilities that can actually be exploited are prioritised for timely remediation.

From a single starting point
to full visibility

An iterative cycle rather than a one-off scan — every confirmed asset widens the picture.

Define starting points

You provide seeds — such as a domain, IP range or ASN. GrayScope approaches your infrastructure from the outside, the way an attacker would begin.

First discovery in minutes

An initial inventory of your externally reachable assets appears within minutes and is visible in near real time.

Validate ownership

Discovered assets are clearly attributed to you before anything proceeds. This reduces false positives and keeps discovery clean and legally sound.

Iterate deeper

Confirmed assets trigger the next round of discovery. Iterative logic uncovers connected and hidden exposures that isolated scans miss.

Score risk dynamically

Assessment is based on real exploitability, complemented by severity. So what is truly dangerous ends up on top.

Risk with context

Every finding comes with context: the affected service, classification, timeline and concrete next steps. Critical findings are actively validated — with your approval — before they reach you.

Monitor & alert

GrayScope monitors continuously and reports new risks promptly — through your existing channels.

Integration & alerting

Fits into your existing workflows

Ticketing

Straight into your workflow

Automatic tickets for new or critical risks — with full context and status sync across teams.

JiraServiceNowPolarion& more

Notifications

Alerts where you already work

Daily scans detect changes automatically; optionally hourly or ad hoc. Notifications reach you promptly.

E-MailSlackMS TeamsSIEM

Working together

GrayScope finds. GrayEVA checks.

GrayScope discovers your internet-facing assets, entirely passively. GrayEVA actively checks exactly these assets for vulnerabilities and prioritises what should be fixed first.

To GrayEVA →

FAQ

Frequently asked questions

What is GrayScope?

GrayScope is our solution for attack surface monitoring based on the principles of Continuous Threat Exposure Management (CTEM). It discovers, maps and monitors your externally visible IT landscape, such as domains, IPs, services and web applications, continuously and fully passively.

Does GrayScope touch my systems?

No. GrayScope works purely passively and non-invasively from the outside perspective — no internal access, no interference with your systems. Discovered assets are unambiguously attributed to you before each further discovery round — keeping detection clean and legally sound.

How quickly do I see first results?

You define starting points such as a domain, IP range or ASN. A first inventory of your externally reachable assets emerges within minutes; an iterative loop then keeps expanding the picture — instead of a one-off scan.

How does GrayScope prioritise risks?

By real-world exploitability, complemented by CVSS severity. Actively exploited vulnerabilities come first.

Do I need my own security team?

Not necessarily. On request, we operate GrayScope for you as a managed service. Alerts and tickets reach you through your existing channels.

Does GrayScope also cover suppliers?

Yes. The outside-in discovery works just as well for your suppliers' attack surface — before their risks become yours.

Do you know what is visible from outside?

See your attack surface the way an attacker sees it.

Request a demo →