Free check Analyse now →
Platform/angriffsflaechen-analyse

Attack surface analysis.

Every domain, subdomain, IP, open port and exposed service that belongs to you is part of your attack surface - and attackers map it continuously. See it the way they do, in two minutes.

Analyse my attack surface → What we check Passive, non-intrusive, no login.
01

What is an attack surface analysis?

An attack surface analysis - also called External Attack Surface Management (EASM) - discovers every internet-facing system of an organisation and assesses its risk from the outside. Not from an agent inside your network, but exactly from where an attacker starts: the public internet.

The point is coverage. Most incidents start on a host nobody was watching - a forgotten subdomain, a test server, a service that was only meant to be temporary. An external analysis finds those before someone else does.

02

What Athorion checks

One domain is enough. Discovery expands it into every host that belongs to you, then each one is measured passively.

Asset & subdomain discovery
Certificate transparency, DNS and passive sources reveal every host that belongs to you, including the forgotten ones.
Open ports & services
Which ports are open, which services and admin interfaces are exposed on each discovered host.
Known CVEs
Detected versions are matched against NVD and the CISA KEV catalogue of actively exploited flaws.
TLS & security headers
Certificates, protocol versions, cipher suites and headers such as HSTS and CSP.
Mail & DNS posture
SPF, DMARC, DKIM, MTA-STS, DNSSEC and CAA - the records that decide whether your domain can be spoofed.
A clear risk rating
Every finding feeds a traceable 0-100 score, prioritised by exploitability, with a fix for each issue.
03

Why the outside-in view matters

01
Shadow IT and forgotten assets
You cannot protect a host you do not know about. The outside-in view finds the ones that never made it into any inventory.
02
An attacker needs one way in
Defenders have to cover everything; an attacker needs a single exposed service. Seeing what they see closes that gap.
03
Change happens continuously
New subdomains, expiring certificates, a newly disclosed CVE on a version you run - the surface moves, so monitoring beats a one-off test.
04
Evidence you can act on and show
Each finding comes with a fix and the evidence behind it - usable by your team and by auditors.
Running this continuously is also a technical building block of NIS2 risk management. See NIS2 and your attack surface →
04

Frequently asked

What is an attack surface analysis?
It discovers every internet-facing system of an organisation - domains, subdomains, IPs, open ports and services - and assesses the risk the way an attacker would see it.
Is the analysis intrusive?
No. Athorion measures passively and non-intrusively - DNS, certificate logs, one HTTPS request, a TLS handshake and connects on common ports. No exploitation, no login attempts, no load.
What does it cost?
The first external analysis is free and needs no login. You only enter your domain.

See your attack surface now.

Enter your domain and get a free, non-intrusive external analysis - open ports, exposed services, TLS and mail posture, known CVEs. No login.