EASMLens

Platform

External attack surface management, from discovery to evidence

EASMLens finds what your organisation exposes to the internet, checks it without breaking anything, and tells you what changed since the last scan. Six capabilities do the work.

Request a demo

Capabilities

Attack surface discovery

Find every internet-facing domain, subdomain, IP, certificate, cloud service and API attributed to you, including shadow IT nobody told security about.

External vulnerability scanning

Non-destructive checks on every internet-facing asset you own: exposed services, known vulnerabilities, end-of-life software and risky configurations.

Email security monitoring

Monitor SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DNSSEC, DANE and BIMI across every domain you own, including parked domains attackers spoof.

Dangling DNS and subdomain takeover

Find CNAME records pointing at cloud resources that no longer exist, before someone claims the resource and serves content on your subdomain.

Certificate and website monitoring

Catch expired and expiring TLS certificates, sites still on plain HTTP and website quality issues across every web asset you own, not just the main site.

EASM for MSPs and consultants

Run continuous attack surface management for every client from one platform: separate workspaces, ownership proof, client reports and AI summaries.

How it fits together

  1. 1

    Discover

    Find every internet-facing asset attributed to you from DNS, certificate transparency and internet-wide data.

  2. 2

    Check

    Run non-destructive checks on the assets you have proved you own: services, vulnerabilities, email records and certificates.

  3. 3

    Track

    Keep each finding stable between scans, so you see what is new, what is fixed and what changed.

  4. 4

    Evidence

    Export reports for auditors, asset owners and boards, mapped to the rules in your country.

Passive discovery runs for every seed. Active checks run only for domains whose ownership has been proved with a DNS TXT record, or for organisations a platform administrator has marked trusted. EASMLens never attempts exploitation and is not a penetration test. See also our buyer's checklist for EASM software and the country guides.