Capability 01
Asset discovery and attribution
Define discovery of internet-facing domains, subdomains, hosts, applications and other agreed asset types. Validate ownership and distinguish customer assets from third-party infrastructure.
External exposure management
All servicesExternal Attack Surface Management
Identify and prioritise exposure across the organisation’s internet-facing assets.
Discuss this scopeCapability 02
Exposure assessment
Assess the agreed external surface for exposed services, configuration concerns and changes that warrant investigation. Prioritise findings using business context and validated asset ownership.
Capability 03
Remediation tracking
Assign findings to owners, track agreed actions and recheck relevant exposures. Coordinate material findings with the SOC without treating monitoring as a substitute for remediation.
Deliverables
Outputs to agree
- Validated external asset inventory
- Prioritised exposure findings with supporting context
- Assigned remediation actions and verification records
- Reports on changes to the agreed attack surface
Service boundaries
Defined coverage and responsibility
Confirm asset boundaries, discovery cadence, validation methods, authorised scanning, exclusions and third-party permissions. EASM is a separately scoped service and is not automatically included in the MDR service.
The proposal must identify Vula Connect’s responsibilities, any delivery partners or specialist subcontractors, and the customer’s obligations before service commitments are made.
Related cybersecurity services
Start with your environment
Where does access
need attention?
Tell us which systems you use, what is getting in the way and what you need to change. We can discuss a suitable scope.
[email protected]Book a discovery call to discuss your needs.
Cape Town, South Africa