DiscoveryExternal Asset Discovery
Continuously discover internet-facing domains, subdomains, IPs, services and web applications attackers can see.
Deterministic evidenceScope-aware executionAdaptive capability
Capability architecture
External Asset Discovery: context, validation and evidence.
This capability contributes to the same platform outcome: understanding realistic attacker exposure and proving what matters.
01Why it matters
- Unknown assets often sit outside CMDBs, ownership models and normal security testing.
- External exposure changes constantly as cloud, SaaS, DNS and development teams move quickly.
- Discovery is the foundation for every later validation workflow.
02ThreatCanary approach
- Enumerate subdomains, resolve assets, identify services and model DNS and network relationships.
- Apply scope rules before testing and preserve raw discovery evidence for audit.
- Link discovered assets to technologies, APIs, owners, findings and attack-path relationships.
03What it validates or reveals
- New or changed external assets.
- Forgotten, unmanaged or unauthorised internet-facing systems.
- Assets that deserve deeper fingerprinting, API discovery or validation.
04Evidence and outputs
- A clear explanation of the exposure, affected assets and likely attack path.
- Reproducible evidence suitable for analysts, developers and risk owners.
- Prioritisation based on exploitability, business impact, sensitive data and chainability.
- Owner, remediation and workflow context that can move into Jira, Slack, SIEM or reporting.
