Cybersecurity definition
What is EASM?
EASM stands for External Attack Surface Management.
By Cyber Tool Stack Editorial TeamUpdated
Definition
Continuously discovers and monitors an organization's internet-facing assets — including forgotten subdomains and shadow IT nobody remembers standing up — from the outside, the same vantage point an attacker starts from.
Where EASM fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
Attack SurfaceEvery point where an attacker could potentially get in or extract data — exposed servers, APIs, cloud accounts, employee accounts — the thing exposure management programs work to continuously discover and shrink.CAASMCyber Asset Attack Surface ManagementAggregates data from existing tools — EDR, cloud, identity, vulnerability scanners — into one queryable inventory of every asset an organization has, closing the gaps that come from no single tool seeing everything.