External attack surface management, or EASM for short, refers to the practice of understanding and managing threats that arise from internet-facing systems. These systems could include software and assets from third party vendors, public cloud environments and any other assets that are hosted outside of your firewall.