thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

External Attack Surface Management (EASM)

Continuous discovery and monitoring of an organization's internet-facing assets as an attacker would see them.

Definition

EASM platforms discover unknown domains, IPs, cloud assets, certificates and services, then flag exposures such as outdated software or open admin interfaces. It addresses shadow IT and forgotten assets. It is the defensive, continuous counterpart to external reconnaissance.

Example

EASM detects a forgotten Jenkins server on a subsidiary's domain exposed to the internet.

Exam tip

EASM focuses on unknown, external assets; vulnerability scanning typically covers known inventory.

Related terms