COMPARISON/Surface vs research

Attack surface vs security research: a map is the start

External attack surface management finds what is on the internet. The workspace keeps that view, then investigates the app, the source, the cloud account, and the workspace suite.

See the attack surface Trusteed vs Detectify

Seeing a host is not the same as proving what it can do.

An attack-surface map is useful when the question is “what is reachable.” Trusteed uses that as the scope of research. The next step is a hypothesis on the live application or in the repository, a test, and evidence of impact. Cloud accounts and Microsoft 365 or Google Workspace stay in the same workspace when they are in scope.

Question

Attack surface mapping

Trusteed

Stops when

The asset is listed

The finding shows impact

Also includes

The external footprint

Source, cloud, and workspace

Next change

Another row on the map

Another investigation

FAQ

Frequently asked questions

How an attack-surface map differs from the research workspace.

See the attack surface →

What does attack surface mapping stop at?

A current list of what is reachable. That list is the scope of research, not the finding.

What does the workspace add?

A hypothesis, a test, and evidence of impact, across web, source, cloud, and workspace. The next change starts another investigation.