See your external assets. Review changes. Prioritize investigation.
TrekShield ASM organizes authorized domains, IPs and network ranges into an external asset inventory and surfaces changes for review. Monitoring coverage and assessment methods are configured for the agreed scope.
From authorized scope to agreed next action.
The scope and authorized methods are agreed for the program.
Security teams responsible for external assets and exposure changes.
- 01
Authorized scope
- 02
Monitoring
- 03
Signal review
- 04
Agreed next action
Define the external scope
Start with domains, IPs and network ranges you are authorized to monitor. Confirm ownership, relevant boundaries and monitoring objectives.
A discovered asset is not permission to test it. Additional active assessment must stay within the approved scope and authorization.
Configure monitoring, not a vague promise
Monitoring uses public sources and DNS observation. Active assessment methods require explicit authorization. Discovery signals are distinguished from analyst-confirmed risks.
Before monitoring starts, we agree the monitored roots, your monitoring posture and any authorized active methods with you.
Review inventory and detected changes
Use the customer inventory to review monitored assets and their last-observed state. The Overview brings together asset, exposure and change information.
Monitoring shows what is exposed and what changed; a penetration test shows what an attacker can do with it. Assets that have not been observed recently are flagged as blind spots.
Separate signals from confirmed risks
Under-review exposures remain unverified signals until the applicable review process establishes their status. Not every signal becomes a reported finding.
Human review helps decide whether an exposure needs further investigation, remediation or a scoped penetration test.
Bring important exposure into testing
When a confirmed exposure deserves a human test, TrekShield can turn it into a scoped test proposal for your approval. Nothing is tested without it.
TrekShield ASM is delivered as a co-managed service. Our analysts run discovery within the scope you authorize and review every signal before it is reported, and you see your inventory, changes and confirmed risks in the platform. ASM can be bought on its own or alongside PTaaS.
Know who owns the next step
Your team identifies authorized scope, approves active methods and assigns remediation responsibilities. TrekShield configures the agreed service, reviews signals and coordinates any additional testing.
The current customer experience centers on Overview, Assets, Risks and Monitoring. Product availability and enabled coverage depend on the agreed configuration.
Who does what.
| People and responsibilities | Platform |
|---|---|
| Identify authorized scope and approve active methods | Configured discovery, inventory and change review |
| Review signals and decide on investigation | Record monitored assets and last-observed state |
| Assign remediation responsibilities | Surface exposure changes for review |
| Coordinate additional testing when warranted | Distinguish signals from analyst-confirmed risks |
Attack Surface Management — questions buyers ask.
Does ASM replace a penetration test?
No. Asset discovery and exposure monitoring help identify what may need attention. A penetration test assesses an agreed scope with human testing and evidence.
How often does monitoring run?
We agree the monitoring cadence with you when monitoring is set up.
Are all exposures confirmed vulnerabilities?
No. Under-review signals are not confirmed findings. They may need human investigation or may be reclassified after review.
Can we buy ASM separately from PTaaS?
Yes. ASM can be scoped on its own or alongside PTaaS.
Define the right scope.
Security teams responsible for external assets and exposure changes.