Attack surface management (ASM)
Your attack surface changes every day. New services appear, old ones get forgotten, acquisitions bring in unknown assets. ONYPHE's ASM Edition continuously monitors your exposed infrastructure, checks it against 160+ actively-exploited CVEs and known-risky service configurations, and alerts you when exposure changes. Know what attackers see before they do.
Compare plans
eagle view
(starter)
Griffin View
(unlimited)
Griffin View
ASM Edition
Results/month *
100,000,000 *
Unlimited *
Unlimited *
Historical data
7 MONTH
Up to 48 MONTH
Up to 48 MONTH
Enterprise categories & filters
VULNSCAN category
RISKSCAN category
CTISCAN category
EXPORT & DISCOVERY APIs
OQLv2
Customizable dashboards
Ondemand Scan APIs
* All ONYPHE Views are subject to a rate limit of an average of 1 request per second, contact us for Unrated API option;
Trusted by Governments and Security Teams
For organisations that take their Internet exposure seriously
Keep the storm away
Attackers see your Internet exposure before you do. ONYPHE's ASM Edition
runs continuous checks against actively-exploited CVEs and risky
service configurations across your entire digital footprint, alerting
your team to new exposure as it appears.
Attack Surface Management
ONYPHE's ASM Edition adds asset tracking, alerting workflows, and
historical coverage on top of its vulnerability and risk datasets.
Vulnscan
160+ actively-exploited CVEs checked against your exposed services. Detection logic built in-house from sanitized public PoCs, covering every CVE on the CISA Known Exploited Vulnerabilities list.
Riskscan
Every exposed service checked against known-risky configuration baselines. RDP open to the internet, VPN endpoints with known weaknesses, admin interfaces in unexpected places. Flagged before attackers find them.
Continuous asset tracking
Your attack surface changes constantly. New subdomains appear, services get forgotten, acquisitions bring in unknown infrastructure. ONYPHE tracks your digital footprint and alerts your team when exposure changes.
About ONYPHE's ASM Edition
What security teams ask most about ONYPHE's Attack Surface Management solution.
ONYPHE takes a unique approach by scanning the entire Internet and Dark Web in a net-neutral manner since 2017. Unlike competitors that only show you what they choose to display, we scan every exposed asset, including ones you didn't know existed. Our domain-name-based approach is more effective than traditional IP-only methods, helping you discover hidden risks before attackers do.
Our solution is specifically designed to cut ransomware exposure up-front by identifying the initial access vectors attackers use: exposed RDP/VNC services, vulnerable VPN servers, and critical exploits waiting to be leveraged. By continuously monitoring your digital footprint in real-time, we alert you to vulnerabilities before they can be exploited—saving you from the millions of euros typically spent on breach recovery.
We take ethical internet scanning seriously. Our founder and CTO presented our "10 Commandments for Ethical Internet Scanning" at the Cyber Threat Intelligence Summit 2022. We:
✓ Publish transparent web server explanations for all probes
✓ Provide opt-out email addresses for removal requests
✓ Use fixed IP addresses (not disposable ones)
✓ Scan slowly to avoid stressing networks
✓ Honor data removal requests promptly
We operate with full transparency and respect for network owners worldwide.
Yes! For organizations with specific requirements, we provide:
✓ Unrated API options for high-volume needs
✓ Customizable dashboards tailored to your team's workflows
✓ Dedicated account management and priority support
✓ Volume discounts for annual commitments
✓ White-label solutions for service providers