> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Asset Risk Analysis

> Analyze live, inactive, misconfigured, or risky assets across all environments with real-time context and exposure scoring.

> [!TIP]
>
> Understand which assets pose **real risk** — not just which ones exist.

***

## Why Asset Risk Analysis Matters

Not all assets carry the same risk. Some are inactive but still exposed, others are misconfigured, and many accumulate vulnerabilities over time.\
Traditional inventories fail to evaluate **which assets need immediate attention**.

Snapsec ASM solves this by:

> [!TIP]
>
> Classifying assets as live, inactive, misconfigured, or high-risk based on continuous analysis

> [!TIP]
>
> Detecting risky configurations, outdated technologies, and unprotected services

> [!TIP]
>
> Prioritizing assets by severity, exposure type, and exploitation likelihood

> [!TIP]
>
> Enriching assets with ports, DNS, certificates, technologies, and cloud metadata

***

## How Snapsec Performs Risk Analysis

**1. Collect Environmental Context**

Every asset — subdomain, IP, port, server, or technology — is enriched with metadata like DNS, tags, cloud ownership, technologies, and historical behavior.

**2. Evaluate Exposure & Misconfigurations**

ASM detects dangerous configurations including open ports, outdated software, missing WAF, expired certificates, and risky DNS setups.

**3. Classify Asset Risk Level**

Assets are categorized into live, inactive, misconfigured, or high-risk groups using Snapsec’s risk engine.

**4. Prioritize & Alert**

High-risk assets are escalated with severity scoring and pushed into VM workflows for rapid remediation.

***

## What Problems This Solves

> **Risk-Based Prioritization**
>
> Identify which assets actually matter — enabling teams to focus on the highest-risk exposures first.

> **Misconfiguration Detection**
>
> Automatically detect unsafe setups like open ports, missing WAF, invalid certificates, and insecure technologies.

> **Lifecycle Awareness**
>
> Understand the true state of each asset: active, abandoned, shadow, misconfigured, or risky.

***

## Key Benefits for Your Security Team

> **Prioritize What Matters**
>
> Focus response efforts on assets that present the highest exposure risk.

> **Reduce Attack Surface**
>
> Find and resolve risky configurations before attackers exploit them.

> **Strengthen VM Programs**
>
> Feed high-risk assets directly into VM tickets for structured remediation.

> **Improve Operational Visibility**
>
> Continuously track which assets go live, go offline, or become newly dangerous.

***

## Example High-Risk Conditions

> [!CAUTION]
>
> Active assets running outdated, vulnerable software versions.

> [!CAUTION]
>
> Inactive subdomains still resolving with open ports.

> [!CAUTION]
>
> Exposed IPs reachable without any access control.

> [!CAUTION]
>
> Web servers without WAF protection.

> [!CAUTION]
>
> Assets using expired or weak SSL/TLS certificates.

> [!CAUTION]
>
> Technology stacks exposing sensitive debug or admin functionality.

***

## What Happens After Risk Evaluation

**1. Enrich the Risk Profile**

Each risky asset is paired with metadata like ports, DNS, technologies, certificate status, and cloud context.

**2. Classify & Score**

ASM uses policy rules and AI analysis to generate a risk score based on severity, exposure type, and exploitation likelihood.

**3. Generate AI Report**

ASM automatically produces a risk-focused report with impact, reasoning, and step-by-step remediation.

**4. Send to VM Tickets**

High-risk assets are synced into Snapsec VM for tracking, assignment, and resolution.

***

## Next Steps

> **Explore Full ASM Capabilities**
>
> See how Snapsec ASM gives you a 360° view of your external risk posture.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.