CyberGlossary

Defense & Operations

Attack Surface Management (ASM)

Also known as: ASM

Definition

Continuous discovery, inventory, classification, and monitoring of all assets that expose an organization to potential cyberattack.

ASM treats the attack surface as a living object: every internet-facing host, API, cloud service, SaaS tenant, code repository, and third-party connection that an attacker could target. Tools continuously enumerate these assets from external and internal vantage points, link them to owners, and flag exposures such as unpatched services, expired certificates, leaked credentials, or shadow IT. ASM bridges the gap between asset inventory, vulnerability management, and threat intelligence so risk decisions are based on what really exists today. It is essential for cloud-first, M&A-heavy, and rapidly changing environments where traditional CMDBs are perpetually out of date.

Examples

  • An ASM platform that discovers a forgotten staging server exposing an admin interface to the internet.
  • ASM correlating a newly registered look-alike domain with an existing brand-protection workflow.

Related terms