> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Exposure Management

> Surface critical risks, leaked credentials, misconfigured access controls, and risky services.

Exposure Management moves beyond passive inventory to pinpoint active, high-risk security flaws across your perimeter.

***

## Exposure Rule Engine

Snapsec uses a YAML-driven rule engine to evaluate asset state and trigger exposure alerts:

```yaml theme={null}
rule:
  id: "exp-001"
  name: "Exposed Database on Public Subnet"
  severity: "Critical"
  match:
    ports: [3306, 5432, 27017, 6379]
    exposure: "internet-facing"
  action:
    generate_exposure: true
    notify: "slack:#security-incidents"
```

***

## Top Common Exposures Detected

1. **Directly Exposed Admin Consoles**: Publicly accessible Jenkins or Kubernetes dashboards without SSO.
2. **Exposed Version Control & Env Files**: Public access to `/.git/`, `/.env`, or `id_rsa` private keys.
3. **Internal IP Disclosure**: HTTP response headers leaking private RFC 1918 internal IP addresses.
4. **Insecure CORS Policies**: Wildcard `Access-Control-Allow-Origin: *` paired with credentials.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.