The External Surface inventory provides a searchable, filterable view of all your internet-facing assets.
The External Surface inventory provides a searchable, filterable view of the internet-facing assets that Cortex Cloud has discovered and attributed to your organization, including certificates, domains, services, and websites. Navigate to → → to access the All External Surface Assets view, or specific categories including Services, Websites, Domains, and Certificates.
Notice
Requires the Attack Surface Management (ASM) add-on.
The following sections provide information about each External Surface asset type. For information about external IP address ranges, see Network configuration.
External asset categories
There are four categories of external assets:
Services: Any internet-facing device or software communicating on an application-level protocol over the public internet. The services table includes detailed fields such as Active classifications, Business units, Discovery type, Externally inferred CVEs, and an Externally inferred vulnerability score.
Websites: Represents the content and the software stack that was used to generate a website.
Domains: All root domains and subdomains that Cortex Cloud has attributed to your organization. Subdomains are automatically grouped under a wildcard domain asset if they resolve to the same IP address, and are collapsed under a parent domain if more than 1,000 subdomains are observed.
Certificates: Cortex Cloud tracks "cryptographic health" checks, flagging issues such as self-signed or expired certificates, and weak signature algorithms.