SURFACEMON EASM Platform

SURFACEMON is a SAAS External Attack Surface Management & Cybersecurity Platform , identifies vulnerable points against cyber attacks by comprehensively and continuously analyzing the external attack surfaces of organizations.

Benefits of SURFACEMON EASM Platform: • Identifying potential attack targets that could compromise security. • Detection of security vulnerabilities and vulnerabilities • Determining whether existing security measures are effective or not and revealing which areas need strengthening. • Identifying and managing information security risks • Identifying and preventing unauthorized access vulnerabilities. • Identifying vulnerable software • Detection of outdated security patches • Identifying misconfigured systems • Taking precautions against DDoS attacks • Detecting Shadow IT

SURFACEMON essentialy consists of 3 different modules:

1- ATTACK SURFACE DISCOVERY MODULE: Attack Surface Discovery Module; it is an interface consisting of 6 submodules that performs scans to create digital inventories of institutions. Within the scope of this interface, the following information is collected: sub-domain assets, service assets, IP assets, assets on the cloud structure, certificate assets and whois records.

2- VULNERABILITY DISCOVERY MODULE: Vulnerability Discovery Module; It is an interface consisting of 4 submodules that detects vulnerabilities in digital inventories. Within the scope of this interface, the following types of vulnerabilities can be discovered; CVE-based vulnerabilities, configuration-based vulnerabilities, SSL-based vulnerabilities and HTTP headers-based vulnerabilities.

3- DARK-WEB RADAR (darkd): Dark-Web Radar; It covers the discovery of data leaked and/or put up for sale on the dark web, based on the main domain name of the institution. In this context, leaked data of the institution is collected, purchased and transmitted to the institution in detail.

SURFACEMON PRICING STRUCTURE:

SURFACEMON has a subscription-based Service Platform business model that provides a predictable and transparent pricing structure and offers a flexible pricing structure based on the number of digital assets and needs of every institution as listed below:

1- ESSENTIALS LICENCE PLAN: Standard License Plan; It is for small-scale businesses that have established a culture of cyber security awareness and want to create their digital inventories, track security vulnerabilities and ensure regular control of leak data. 2- PREMIUM LICENCE PLAN: Premium License Plan; It is for medium-large scale businesses with an active IT ecosystem that want to create their digital inventories, track security vulnerabilities, track leaked data, and seek the offensive security experience of our brand's experts when necessary. 3- ENTERPRISE LICENCE PLAN: Enterprise License Plan; It is for large-scale businesses with an intensive and active IT structure.