External scans
Public domains: attack surface map, technologies, vulnerabilities and NIS2.
Guides
- Create your first external scanStart a domain mapping, pick the right company, check data completeness and the Cyber Token cost before you create the scan.3 min read
- Follow a scan and manage multiple domainsCreate a scan across several domains, follow its progress and phases live, and open each company's results once the scan has completed.3 min read
- Vulnerabilities: read the evidence and triage findingsRead severity, CVSS, CISA KEV and EPSS for a vulnerability and mark it as false positive, resolved or accepted risk so the decision carries forward.4 min read
Lessons
- Read the attack surface mapHow to read the map's layers, colours and links, isolate an asset, open Asset Information and show inactive subdomains.2 min read
- Inventory, technologies, ports and servicesRead the Asset Inventory of an external scan, filter hosts, explore the Sitemap and open a host's panel with ports, technologies and evidence.3 min read
- Web security: headers, TLS, DNS and cookiesRead the Web Security tab of an external scan and learn what to fix first in HTTP headers, TLS certificates, DNS and cookies.3 min read
- NIS 2: classification, criteria and obligationsRead the NIS 2 tab of an external scan: most likely classification, sector, compliance criteria, estimated penalties and priority.2 min read
- Industry risk and comparable breachesRead the industry risk score and grade, compare the 12-month scenarios and use recent breaches in your sector to set your priorities.2 min read
- Company groupsHow RECON brings several domains and related companies into one external scan, and how to read the group's assets, risk and vulnerabilities.2 min read
Still stuck?
Ask the assistant or write to the Orizon team.