Skip to main content

What Is the Attack Surface Page?

The RHL ASM Platform is designed to manage and protect an organization's attack surface by discovering and addressing potential vulnerabilities that could be exploited in external attacks. It enables continuous monitoring and analysis of assets, allowing organizations to proactively identify and remediate changes or exposures, thereby reducing the risk of cyberattacks.

What Does the Asset Exposure Module Include?​

The Asset Exposure feature presents a list of all assets associated with the organization. These assets are discovered based on minimal seed information initially provided by the organization.

Each discovered asset includes the following details:

  • Asset: URL to access the asset.
  • Asset Type: Category assigned by the platform.
  • Location: Host location of the asset.
  • Exposure Severity: Indicates the vulnerability level, categorized as INFO, LOW, MEDIUM, HIGH, and CRITICAL.
  • First Seen / Last Seen: Dates when the asset was first and last detected during scans.
  • Tags: Metadata labels associated with the asset, which can be used for filtering.
  • Cloud Classification: Classifies the cloud provider/service (e.g., AWS (including CloudFront), GCP, Azure).
  • View Ports: Click to view open ports associated with the asset.
  • View Vulnerability: Click to view associated security risks or vulnerabilities.

Assets can be filtered using:

  • Asset Types
  • Tags

What is an Asset Inventory and What Are Its Functionalities?​

The Asset Inventory feature displays the same asset data available in the Asset Exposure section but in a structured, tabular layout. This layout organizes information in rows and columns for easier analysis.

Filters Provided in Asset Inventory​

  • Asset: Filter by asset URL.
  • Asset Type: Filter by the category of the asset.
  • Ports: Filter by specific port numbers representing services or processes.
  • Tags: Filter by tags (metadata) assigned to assets.

To learn how to manually tag assets, see: How to Manually Tag Assets?