Mandiant Attack Surface Management

An attack vector is an exploitable asset in the attack surface. An attack vector can be used by a threat actor for initial compromise.

At Google Cloud, we define external attack surface management as the automated and continuous discovery of internet-facing assets and cloud resources, assessed for technology relationships and the identification of vulnerabilities, misconfigurations, or exposures.

Examples of attack surfaces include domains, IP ranges, data repositories, websites, servers, email, cloud resources, applications, microservices, and employees.

Onboarding is simple. All we need is a domain, IP address, URL, or netblock.

To reduce the overall attack surface, attack surface management solutions generate an asset inventory and alert the security team to exposed assets that can be targeted for exploitation.

Customers are empowered to use their preferred SIEM, SOAR, or ticketing system to facilitate remediation and attack surface reduction. Mandiant Attack Surface Management supports integrations with Chronicle Security Operations, Cortex XSOAR, Splunk Enterprise, and ServiceNow. Customers often use the API to retrieve data from Mandiant Attack Surface to send to their preferred SIEM, SOAR, or Ticketing Systems.