Earlier this year, we launched a new Domains page to give you more powerful and flexible attack surface insights. When the recent CUPS vulnerability hit the news, our new page quickly allowed users to create a policy to detect potential threats on port 631—something that wasn’t possible before. Since then, we’ve rolled out dozens of improvements to help security teams like yours feel more confident in managing their ever-changing attack surface.
Huge improvements to filtering the Domains page
Enhanced filtering is now possible, streamlining the process of finding the exact domains you need and subsequently creating a custom policy from your filtered criteria. We’ve introduced five new filter operators for columns with multiple values, giving you the power to pinpoint specific domains and build highly targeted policies. You can also use our new filter suggestions, curated by our security experts, to quickly identify domain data worth investigating.
Why does this matter to security teams? Imagine sifting through a long list of data to find a single asset on the attack surface. It’s time-consuming and could mean missing critical risks. Our improved filtering acts like a high-powered lens, focusing your attention on potential threats and streamlining your workflow found through Detectify attack surface reconnaissance. This enables your team to proactively address vulnerabilities and exposures before attackers do.
The release of new, more visible filters simplifies the process of viewing and adding filters, facilitating easier data filtering and policy creation for monitoring desired elements.
Explore your domain data with the network graph
We launched our new network graph feature to help users understand the complex relationships between digital assets across the attack surface. Some users struggle to understand how individual assets connect and depend on one another, such as the various countries where a single service provider might host data. This lack of visibility can get in the way of risk mitigation efforts, as it’s challenging to pinpoint the exact steps needed for remediation. Hidden connections can also lead to unintentional security policy violations, such as hosting providers in restricted regions. Our network graph tackles these challenges head-on, providing a visual representation of asset dependencies that can help security teams make sense of exposed assets and make more informed and proactive security decisions.
We encourage you to share your feedback and experiences. This will help us refine and enhance the feature over time, ensuring it continues to meet the evolving needs of your security team.
Assess how your domains are connected to other data points and understand the degree to which our scanners can access your domain.
Creating custom policies directly from your filtered view of the attack surface
We’ve recently improved the way you create custom security policies within the new domains page. Now, you can create policies based on a variety of domain characteristics, such as the presence of specific cloud providers and technology. Additionally, when setting up Attack Surface Custom Policies, you have the flexibility to target specific domain clusters. This means your policies can now be specific to different segments of your attack surface, triggering alerts only where they are truly relevant.
By enabling granular control at the domain level, we help enable you to enforce security standards more effectively and reduce the risk of overlooked breaches, ensuring that your valuable time and attention are focused on the most critical threats.
Are you interested in learning more about Detectify? Start a 2-week free trial or talk to our experts.