Attack Surface and Threat Intelligence Assessment

Receive actionable insights to improve your AWS security posture with an external attack surface assessment delivered by SecurityHQ. Detect issues across eight different categories.

Vulnerable Services: Identify whether your organization is at risk from any vulnerabilities or incorrect configurations on your external attack surface.

Network Security: Identify open ports of remote administration services (RDP, SSH, VPN, etc), database ports, insecure service headers, open proxies or running Tor nodes.

Leaked Credentials: Identify leaked credentials associated with your organizations employees that are published or are being sold in marketplace forums.

Association with Malware: Analyze the output of sandbox data for interactions between malicious programs and the assets that are part of your organizations external attack surface.

Mention by a Threat Actor: Identify whether adversaries have mentioned any of your assets on dark web forums.

SSL/TLS Security: Identify out-of-date SSL/TLS versions & the use of weak encryption algorithms. Other risks are also considered such as expiration of SSL certificates.

Email Security: Identify whether recommended SPF and DMARC configurations are deployed in order to reduce your attack surface.

DNS Security: Identify potential weaknesses with DNS configuration and verify whether settings meet best practices.

Impersonating Domains: Identify typo squatting domains that appear to be impersonating your organization domains.