Surface & infrastructure
External attack surface
External attack-surface monitoring inventories the hosts, ports, services and known vulnerabilities exposed on the internet under your domains and address ranges.
The problem
A subsidiary opens a remote access, a contractor leaves a database on a public port, a certificate expires, a vulnerable version stays online: your exposed surface changes without the inventory following. Attackers scan it constantly.
Client area preview
What you see
Fictional data, for illustration only: no client, no real data.
What you get: this screen in your client area, refreshed at every synchronisation, with CSV and JSON export.
- 01
The inventory of exposed hosts, with ports, services, versions and certificates
- 02
Known vulnerabilities tied to each service, ranked by severity
- 03
Changes: new hosts, new ports, services gone, certificates to renew
How it works
Our answer in three steps
VesperID inventories what is exposed on the internet under your domains and address ranges: hosts, ports, services, versions and known vulnerabilities, and alerts you when something appears or changes.
- 01
You declare domains and address ranges; ownership is verified before any observation.
- 02
Continuous collection observes what answers from the internet under your domains and ranges, with no intrusive test; the platform dates every appearance, change and disappearance.
- 03
An analyst qualifies the critical exposures and proposes the fix or the closure.
Where this data comes from
The inventory comes from the continuous observation of what answers from the internet under your domains and address ranges, with no intrusive test; VesperID dates every change and computes the drift of your surface.
Our sources in detailCross analyses
What the platform computes on top
This service’s data is crossed with the others’: here are the analyses that come out of it, all visible in the client area.
Discover the platform- 01
Surface drift
Hosts and ports that appear, change or disappear from one synchronisation to the next, and certificates about to expire.
- 02
Exposed service with credentials
A reachable service for which usable credentials circulate forms a chain with an “exposed service” origin, with hardening as the playbook.
What you receive
External attack surface
- 01
Alert at each new critical exposure
- 02
Up-to-date external inventory, exportable
- 03
Fix list prioritised by severity and exposure
- 04
Monthly follow-up of the surface and time to fix
Frequently asked questions
Is this a penetration test?
No. We observe what answers publicly, as anyone on the internet could; we exploit nothing.
Do you cover the cloud?
Everything reachable under your domains or ranges, at any hosting provider. Buckets and repositories belong to open-web leaks.
How often?
Observation is regular; the frequency depends on the size of the perimeter and is set at scoping.
Request an exposure assessment.
One hour with an analyst, not a demo: what already circulates about your organisation, what to monitor, what is better left alone. Reply within one working day.
No public price list: bespoke offering, written proposal after scoping.