Attack Surface Discovery API

常见问题

What is Attack Surface Discovery API?

Attack Surface Discovery API is a set of embedded API capabilities designed to enable attack surface discovery, cleanup, and scanning for cybersecurity platforms. It supports identification of internet-facing assets, false-positive reduction, vulnerability scanning across hosts and web applications, and enrichment of findings with detailed vulnerability context — all through unified API access.

What makes Attack Surface Discovery API different from WHOIS, DNS, and other APIs?

While WHOIS, DNS, SSL, and similar APIs provide individual data points, Attack Surface Discovery API combines multiple data sources with advanced correlation logic.

It goes beyond raw lookups by:

• Discovering assets using DNS, WHOIS, SSL, web crawling, and brute forcing together
• Filtering out noise such as wildcard certificates, public cloud infrastructure controlled by cloud providers, and third-party services
• Assigning likelihood scores to connected assets
• Enabling vulnerability scanning across infrastructure and web applications
• Enriching vulnerabilities with data from multiple vulnerability databases and advisories

The result is the ability to produce a complete and clean attack surface inventory rather than fragmented data.

What are the benefits of using the Attack Surface Discovery API?

Key benefits include:

• Comprehensive asset discovery across domains, IPs, hosts, and web applications
• Reduced false positives through advanced cleanup logic and likelihood scoring
• Unified vulnerability scanning capabilities covering servers, open ports, and web apps
• Rich vulnerability context including vulnerability database IDs, CVSS, EPSS, CISA KEV, and remediation guidance
• Simplified integration, consolidating access to multiple tools and scanners through a single API-driven workflow

Attack Surface Discovery API vs. API attack surface management — what’s the difference?

API attack surface management focuses specifically on discovering and securing exposed APIs.

Attack Surface Discovery API, on the other hand, provides visibility across the entire external attack surface, including:

• Domains and subdomains
• IPs and hosts
• Web applications
• Network services and open ports
• APIs as part of broader infrastructure

It enables a holistic view of external exposure within security platforms and workflows, rather than a narrow focus on APIs alone.

How do I get started with Attack Surface Discovery API?

We’re starting the public test of the Attack Surface Discovery API. To become an early adopter, reach out to us.