Free Engineering Workbench calculator
External attack surface
Measure internet-facing exposure: unknown assets, risky services and weak certificates.
Cybersecurity & cyber assuranceHow it's worked out
- Shares are of known plus newly discovered assets
- Discovery from your attack surface management scan
NoteUnknown assets are the ones nobody patches. Bring the unknown share and risky services to zero first.
Source: CISA KEV catalogue; NIST CSF 2.0 ID.AM (asset management)
Need help acting on this number?
VVnT SeQuor's Cybersecurity & Cyber Assurance practice helps teams turn this metric into a plan.