DATA 		SHEET

Recorded Future Attack Surface Intelligence™ Module
Discover and Defend Your Changing Attack Surface

Challenge
Digital transformation initiatives have resulted in assets being scattered across theinternet. Often created without proper security oversight or hygiene, many internetfacing assets are left forgotten and unsecured. This results in security teams operatingwith limited visibility into their attack surface, causing delayed responses to criticalvulnerabilities, a backlog of exposures to remediate, and an unclear picture of whatneeds to be prioritized.
Due to a lack of visibility or context, 76% of organizations have experienced some typeof cyberattack in which the attack itself started through the exploit of an unknown,unmanaged, or poorly managed internet-facing asset (Enterprise Strategy Group). You
can’t defend what you can’t see.
Solution
Recorded Future Attack Surface Intelligence™ helps organizations confidently reducerisk by improving asset visibility, prioritizing exposures to address, and enforcing
security controls. Backed by the world’s largest repository of present and historical
DNS data, Attack Surface Intelligence presents security teams with a real-time viewof an organization’s internet-facing assets, and actionable insights on associatedexposures to help stay ahead of changes, anomalies, and vulnerabilities across their
attack surface.
Stop relying on cobbled together technologies and manual processes to protect yourattack surface.

Key Benefits• Automate - real-time discovery of new
internet-facing assets• Detect - Identify visible and hidden assets,vulnerabilities. misconfigurations, and otherrisks• Prioritize - Address the exposuresmost likely to be exploited against yourorganization• Integrate - Plug into your ticketingsystems, SOAR platforms, SIEM solutions,or simply export data

Key Capabilities

Asset Visibility
Monitoring an expanding list of external assets has become a major challenge formost organizations. Attack Surface Intelligence provides automated and continuous
discovery of internet-facing assets, attributes them to the organization for an
up-to-date inventory, and delivers valuable information on each asset for furtherinvestigation.

• Continuous identification of new assets

Exposure Prioritization
Most security issues are not a result of zero-day vulnerabilities or advanced attack• Access to the largest archive of past andtechniques. They primarily stem from misconfigurations and exposures caused bysimple errors. This means organizations require greater insights into whether anasset is vulnerable, risky, or exhibiting irregular behavior. Attack Surface Intelligencedetects high risk CVEs, misconfigurations, end-of-life software, and additional typesof exposed assets. For each exposure identified, dynamic scoring and evidence areprovided to aid in prioritization and remediation.

• Transparent exposure scoring, context, andevidence• Persistent and prioritized view of theexternal attack surface
present DNS history• Support from world-class attack surface
experts for onboarding, training, andongoing support

Recorded Future® | www.recordedfuture.com

Security Controls Enforcement
Organizations invest significant time and effort creating security policies meant to safeguard their operations. However, moderntechnology enables employees to spin up new assets, oftentimes outside the purview of IT. Attack Surface Intelligence provides
an automated and real-time stream of new internet-facing assets and details as to whether assets adhere to the appropriate
policies and standards. For example, are assets being hosted by the right provider? Are they behind a web application firewall(WAF)? Are any administrative panels exposed to the public internet? If assets fall out of policy, visibility ensures they’re quickly
put back in a defensible position.
Trusted to Protect an Expanding Attack Surface
A Fortune 500 Financial Institution was running a vulnerable version of WordPress, allowing unrestricted file upload and remotecode execution. Attack Surface Intelligence automatically surfaced the domain owned by the client, and assigned a critical risk
score. Visibility into this domain enabled the company to immediately flag for internal investigation and remediation.
A Fortune 500 Beverage Company relies on a decentralized marketing team that often creates new internet-facing assets without
proper hygiene and alerting. With Attack Surface Intelligence the company can easily track when new assets are created. Visibility
also helps them improve their efforts to maintain domain hygiene and remove associations from divested brands.

Forgot static lists, manual processes and human audits. Attack Surface Intelligence provides real-timeinsight on internet-facing assets and supports exposure management across the business.

ABOUT RECORDED FUTURE®
Recorded Future is the world’s largest threat intelligence company. Recorded Future’s Intelligence Cloud provides end-to-end intelligence across adversaries,infrastructure, and targets. Indexing the internet across the open web, dark web, and technical sources, Recorded Future provides real-time visibility into an
expanding attack surface and threat landscape, empowering clients to act with speed and confidence to reduce risk and securely drive business forward.
Headquartered in Boston with offices and employees around the world, Recorded Future works with over 1,700 businesses and government organizations acrossmore than 75 countries to provide real-time, unbiased, and actionable intelligence.
Learn more at recordedfuture.com© Recorded Future®, Inc. All rights reserved. All trademarks remain property of their respective owners.