1.05Security testing
Attack Surface Management
Continuous discovery, inventory and validation of domains, subdomains, services, cloud assets and other externally accessible systems.
New subdomains, development environments, cloud services and third-party systems can appear between periodic assessments. External attack-surface management maintains an up-to-date inventory and monitors material changes from an external perspective.
Automated discovery is combined with manual validation of relevant exposures. This reduces noise and helps distinguish an informational asset change from a weakness that can be exploited or combined with other findings.
The result is a prioritised view of external exposure, including newly discovered assets, ownership, exploitability and remediation status. It complements point-in-time penetration testing by monitoring changes between tests.
How it works
- 01
Seed & discovery
Establish known assets and continuously discover the unknown internet-facing estate.
- 02
Scope & prioritise
Map exposures to business-critical assets and rank by exploitability and impact.
- 03
Validate
Security-testing specialists validate which exposed weaknesses can be exploited, reducing false positives.
- 04
Mobilise & monitor
Assign remediation ownership, track closure and continuously alert on new exposures.
Packages
- Essential
- Baseline external attack-surface discovery and validated exposure report.
- ComprehensivePopular
- Continuous monitoring with validated prioritisation and change alerting.
- Enterprise
- Full CTEM programme with ongoing validation and remediation governance.
Supported by our own threat-intelligence platform
ASM is only as good as the data behind it. We run yours on our own platform – so discovery, validation and monitoring are included, not subcontracted.
OffSeq Guard
Continuously maps your external footprint – subdomains, certificates, DNS and email authentication – and alerts on daily drift.
ExploreOffSeq Threat Radar
Correlates discovered assets with vulnerability intelligence to prioritise exposures for validation.
Explorethreat-finder
Our open-source runtime scanner confirms which CVEs are live in the services running on each host, ranked by network exposure.
ExploreOffSeq Breach
Surfaces leaked credentials tied to your domains – the exposure scanners miss entirely.
ExploreMirage Feed
Attacker IPs and exploited CVEs seen live by our honeypot fleet, so exposure is prioritised by what is actually under attack – free, rebuilt daily.
Explore
Credited findings
Public disclosures and field research where this work produced citable, verifiable results.
| Severity | Finding | Advisory | Year |
|---|---|---|---|
| PHP2Shell in the wild: the first 48 hours on a honeypot fleetInternet-facing PHP (mod_php, PHP-FPM, php-cgi) | CVE-2026-109618 (opens in a new tab) | 2026-10-22 | |
| J@IL-GPT: an infostealer in a fake ChatGPT toolWindows workstations · malicious AI installer | 2026-09-06 | ||
| UpdraftPlus: PHP backdoor delivery attempts via CVE-2026-10795WordPress · UpdraftPlus remote management and plugin installation | CVE-2026-10795 (opens in a new tab) | 2026-09-06 | |
| The honeypot that gets robbed: a fifth of all honeypot traffic is toll fraud, not intrusionInternet-facing VoIP / SIP (Asterisk PBX) | 2026 | ||
| A password is a fingerprint: what the internet's brute force is really typingInternet-facing services (Telnet, SSH, SMB, RDP, VNC, SIP, databases) | 2026 | ||
| A connection is not an exploit: what 27 days of honeypot traffic actually containedInternet-facing services (RDP, SMB, SSH, web, VoIP) | 2026 | ||
| threat-finder – open-source runtime CVE scannerOffSeq open-source tools | 2025 |
What clients in your sector say
From organisations in the same sector.
Manufacturing“OffSeq ran a black-box audit that showed us exactly where we stood – no sugarcoating, just an honest picture from a real attacker’s perspective.”
Ivo Petrovskis
Network & Security Administrator · Livonia Print
E-commerce“Their structured methodology, clear communication, and actionable insights directly contributed to increased system reliability, scalability, and resilience.”
Oskars Podziņš
Head of Information Security · Printful
Manufacturing“They found holes me and my IT team were astonished to hear about. They worked from the heart and in high quality.”
Andzejs Stenclavs
Kinetics
All services
Security Audits
Identify exploitable weaknesses and prioritise remediation.
Red Team & Adversary Emulation
Test whether the organisation can prevent, detect and respond to a goal-driven attack.
Social Engineering Assessment
Measure resilience to phishing, voice fraud and other social-engineering techniques.
Scope a test
support@offseq.com+371 2256 5353
Direct access to a senior specialist · Reply within 24 hours · NDA available on request