> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Asset & Exposure Management Overview

> Unified cyber asset attack surface management (CAASM) and continuous exposure monitoring.

Organizations cannot protect what they do not know exists. **Asset & Exposure Management** combines:

1. **Asset Inventory Management (AIM)**: Comprehensive internal visibility across cloud workloads, APIs, code repos, containers, and employees.
2. **Attack Surface Management (ASM)**: External, continuous reconnaissance discovering internet-facing assets, DNS changes, open ports, and certificates.
3. **Exposure Management**: Real-world exploit correlation and attack path analysis to minimize blast radius.

***

## Architecture of Asset & Exposure Intelligence

```mermaid theme={null}
flowchart TD
    subgraph External_Recon["Attack Surface Management (ASM)"]
        Recon["Passive & Active Discovery
(DNS, Certs, Shodan, Censys, Port Scans)"]
    end

    subgraph Internal_Inventory["Asset Inventory Management (AIM)"]
        Cloud["Cloud Accounts (AWS/GCP/OCI)"]
        Repos["Code & Container Registries"]
        APIs["API Gateways & Endpoints"]
        Identity["Identity Directories (Okta/Azure)"]
    end

    subgraph Central_Graph["Unified Asset & Exposure Graph"]
        Graph["Canonical Identity & Relationship Engine"]
        Classify["Dynamic Tagging & Risk Classification"]
        Exposures["Exposure Rules & Signal Detection"]
    end

    External_Recon --> Central_Graph
    Internal_Inventory --> Central_Graph
    Central_Graph --> Exposures
```

***

## Core Capabilities

> [card] [Asset Inventory Management (AIM)](https://docs.snapsec.co/asset-exposure-management/aim/asset-discovery.md)
>
> Centralize 360° visibility across 10+ asset classes, with automated classification and dependency mapping.

> [card] [Attack Surface Management (ASM)](https://docs.snapsec.co/asset-exposure-management/asm/external-asset-discovery.md)
>
> Continuously detect shadow IT, expiring SSL certificates, open ports, and vulnerable tech stacks.

> [card] [Exposure Management](https://docs.snapsec.co/asset-exposure-management/exposure-management.md)
>
> Flag exposed database ports, misconfigured S3 buckets, staging leaks, and high-risk network paths.

> [card] [Asset Risk & Prioritization](https://docs.snapsec.co/asset-exposure-management/asset-risk-and-prioritization.md)
>
> Evaluate asset business impact, vulnerability density, and simulated blast radius.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.