Surface
Understanding and managing your attack surface in Ethiack
Description
The Surface section gives you a complete view of your organization's attack surface — every asset, domain, and beacon that Ethiack is aware of, along with a visual representation of how they relate to each other.
Keeping your surface accurate and up to date is essential for ensuring that continuous testing covers the right scope and that no exposed assets go unmonitored.
Ethiack helps with this by continuously discovering assets for the domains and beacons you have added to the portal, giving you visibility into new assets that are created.
What makes up your surface
Your attack surface is composed of three main building blocks:
- Domains — the root domains that define the boundaries of your surface. Everything Ethiack discovers is anchored to one or more domains.
- Assets — individual targets derived from your domains, such as subdomains, IPs, and web applications, that Ethiack actively monitors and tests.
- Beacons — lightweight probes deployed within your infrastructure that extend visibility into internal or otherwise unreachable parts of your surface.
Visualizer
The Visualizer provides an interactive graph view of your surface, showing the relationships between domains, assets, and beacons. It is useful for understanding how your surface is structured and for identifying clusters of assets that share a common origin.