Resources
Tag: Attack Surface
Explore resources tagged with "Tag: Attack Surface".
Latest "Tag: Attack Surface" tagged resources
Pairing attack surface management with continuous penetration testing
Change Detection is the cog that turns it all for our continuous penetration testing solution. Sprocket’s attack surface management gives your organization deep visibility into the very same shadow IT assets our testers…
Read more
Surfacing the Invisible: A Guide to Web Application Attack Surface Management
The top five web application-specific attack surface management opportunities Sprocket Security sees regularly. read more →
What is attack surface management?
Attack surface management is a security solution that provides vulnerability monitoring across your digital and physical assets. read more →
What are breach and attack simulations?
Regular BAS exercises can be a valuable tool to improve an organization’s security posture and protect against cyber threats. In the long run, finding and fixing vulnerabilities in an exercise is cheaper and safer than… read more →
Creating a CVE Trends Command Line Tool
How to create a CVE Trends Command Line Tool and be notified in Slack via Webhooks. read more →
Exploiting N-Day Vulnerabilities at Scale with CPT
A basic guide on how Sprocket utilizes Continuous Penetration Testing to rapidly identify and exploit vulnerabilities. read more →
What the heck is an attack surface … and why do I need to protect it?
Maybe you’ve heard your IT security team talking about attack surfaces? Or, maybe the term has come up during a virtual conference or in your newsfeed. It’s important to take a step back and understand what an attack… read more →
VIDEO: How Continuous Penetration Testing Works (the best)
Trying to wrap your head around what separates Continuous Penetration Testing from other forms of network security testing? Well, we get it. That’s why we’ve put together this handy little video. Sit back, have a… read more →
What vulnerability scanners don’t catch – and how it can cost your business millions
Automated Vulnerability Scanners, on the surface, have a lot of appeal to IT directors. They run in the background and are “always on”. They alert you when you have an issue. But the harsh reality is they provide a… read more →
How to hunt for SolarWinds Orion usage
Recent reports from FireEye revealed a large-scale campaign to infect company networks using a modified version of the SolarWinds Orion monitoring agent. read more →
12 Ways You'll Benefit from Continuous Penetration Testing
You need more value out of your pentests. The traditional point-in-time testing isn't cutting it. Continuous penetration testing brings an innovative methodology that better protects you and your business. This post… read more →
Getting started with MITRE CALDERA
The MITRE CALDERA project is an automated adversary emulation system. It's primary purpose is to execute a series of operations to help determine if adversarial tactics can be detected in your enterprise environment. read more →
Continuous Human & Automated Security
The Expert-Driven Offensive
Security Platform
Continuously monitor your attack surface with advanced change detection. Upon change, testers and systems perform security testing. You are alerted and assisted in remediation efforts all contained in a single security application, the Sprocket Platform.
Expert-Driven Offensive Security Platform
- Attack Surface Management
- Continuous Penetration Testing
- Adversary Simulations