Skip to main content
Snapsec Attack Surface Management (ASM) scans the public internet from an adversary’s perspective, discovering assets without needing credentials or installed software.

​
Multi-Source Discovery Engine

Snapsec combines over a dozen passive and active discovery mechanisms:
  • Certificate Transparency Logs (CTL): Real-time monitoring of TLS certificate issuances.
  • Authoritative DNS Brute-Forcing & Permutations: Identifying non-public subdomains.
  • BGP Routing & ASN Announcements: Mapping registered IP blocks and CIDR prefixes.
  • Passive Threat Intelligence Feeds: Ingestion from Shodan, Censys, SecurityTrails, and HackerTarget.
  • Web Crawlers: Discovering linked assets, APIs, and CDN endpoints from public web pages.