Asset Relationships - Snapsec Suite

Modern breaches rarely affect a single isolated asset. Attackers compromise an exposed edge asset and move laterally into private databases.

The Asset Dependency Graph

Snapsec models the topological relationships between assets:

[Public Subdomain: api.company.com]
          │ (Routes to)
          ▼
[AWS ALB / Ingress Controller]
          │ (Distributes traffic)
          ▼
[EKS Kubernetes Service: checkout-api]
          │ (Reads/Writes)
          ▼
[Internal Aurora PostgreSQL DB: prod-db]

Blast Radius Simulation

When a vulnerability is detected on api.company.com, Snapsec computes its Blast Radius:

What internal services trust this endpoint?
Does it have access to production databases or IAM roles with administrative privileges?
If compromised, how far could an adversary pivot?