Attack Surface

An attack surface is the total set of points where an attacker could try to enter or extract data from a system. It spans exposed services, code, identities, devices and people.

Related Terms

  • Cloud Security Posture Management (CSPM)

    Cloud security posture management (CSPM) continuously checks cloud accounts for risky misconfigurations and drift from security policy. It then helps teams prioritise and fix what it finds.

  • Threat Modeling

    Threat modeling is a structured way to identify what could go wrong with a system's security during design. Teams then decide which risks to mitigate before code is written.

  • Vulnerability Assessment

    A vulnerability assessment is a systematic review that identifies, ranks and reports known security weaknesses across systems. It usually combines automated scanning with analyst review and prioritisation.

  • Security Patch Management

    Security patch management is the ongoing process of finding, testing and applying updates that fix known flaws. It covers operating systems, libraries, applications and infrastructure.

A clear proven process, that delivers

End of Scroll. Start of Discovery.

You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.