Attack Surface Modules
Domains & Subdomains
Discover every domain, subdomain, cloud-hosted property, and acquired asset tied to your organization, including orphaned and forgotten entries.
Email Security
Identify SPF, DKIM, and DMARC misconfigurations that let attackers send email as your brand and bypass spam filters.
Breach Exposure
Surface employee credentials leaked in data breaches, paste sites, and dark web forums before attackers use them against you.
Shadow IT & SaaS
Uncover unauthorized SaaS applications, forgotten cloud instances, and employee-created assets that exist outside your security controls.
Third-Party Risk
Map subsidiaries, acquired entities, key vendors, and technology partners whose exposure extends directly to your attack surface.
Why External Visibility Matters
Attackers do not distinguish between your primary domain and a forgotten subdomain from an acquisition five years ago. They enumerate everything. They correlate leaked credentials from a breach in 2019 with a VPN login page that appeared in a certificate transparency log last month. They find the staging environment a developer spun up in a personal AWS account and left public. Most organizations have no idea these assets exist until something goes wrong. The reality is that most organizations significantly underestimate the size of their external footprint. A typical Leverage Cyber initial assessment uncovers multiple unknown or unmanaged assets — domains that no longer resolve to anything meaningful but still carry live DNS records, SaaS applications authenticated with corporate email addresses, and credentials circulating on forums years after the original breach was disclosed. Each one is a potential entry point. Each one is something an attacker already knows about. External visibility is not optional for organizations that operate at any meaningful scale. Your security posture is only as strong as the weakest asset bearing your name or connected to your identity infrastructure.How Modules Work Together
The five attack surface modules are not independent checklists — they are interconnected intelligence layers. Leverage Cyber correlates findings across modules to surface chained attack paths that individual checks would miss entirely. Consider a common scenario: a breach exposure finding reveals that a developer’s corporate email address appeared in a credential dump, with a plaintext password. A separate domain discovery finding shows an internal Jenkins CI/CD server exposed on a subdomain. A shadow IT finding identifies that the same developer authenticated a personal GitHub account to your organization’s repositories. Individually, each finding has moderate severity. Together, they form a complete, realistic attack path from public internet to your source code — and Leverage Cyber surfaces that chain explicitly. Other examples of correlated findings include:- A leaked credential matched against an exposed partner portal login page
- A misconfigured SPF record on a subsidiary domain enabling brand impersonation targeting your customers
- An acquired company’s expired SSL certificate triggering a trust warning that attackers can exploit for phishing