Simple definition
EASM discovers internet-facing assets and services that may belong to an organization, including assets missing from its declared inventory.
Purpose and use
It helps uncover forgotten services, associated domains and external exposure that needs investigation.
How does it work?
Discovery correlates domains, addresses, certificates and observed services. Attribution to the organization must be confirmed before action.
Key points
- Example: certificate and DNS information reveal an old administration interface that remains publicly reachable.
- Identify its owner, confirm its purpose and verify closure or access restrictions from outside the organization.
Points to watch
Shared addresses, providers and CDNs can cause incorrect attribution. EASM alone does not cover the internal network.
In short
EASM provides an external view of exposure that must be reconciled with ownership and inventory.