External Vulnerability Analysis
Recurring scanning and expert review of internet-facing systems to identify, prioritize and track exposed vulnerabilities.
Know when to bring this work into the program.
Use recurring external vulnerability analysis to identify internet-facing weaknesses between annual penetration tests and after technology changes.
A scope built around the risk.
Recurring scanning and expert review of internet-facing systems to identify, prioritize and track exposed vulnerabilities.
- Known and newly discovered external assets
- Exposed ports, services and software versions
- TLS, certificates, web interfaces and common misconfiguration
- Change over time and urgent exposure
Useful output for the people who must act.
- Recurring expert-reviewed scan results
- Notification of material new findings
- Clear remediation ownership and status
- Trend and verification reporting
A process designed for external vulnerability analysis.
Inventory the perimeter
Begin with known and newly discovered external assets and confirm the systems, people and evidence needed to answer the client’s specific questions.
Scan exposed services
Review exposed ports, services and software versions. Then evaluate tLS, certificates, web interfaces and common misconfiguration to determine whether the relevant controls operate as intended.
Review change
Assess change over time and urgent exposure and connect the result to credible security, operational and business impact.
Alert and verify
Provide recurring expert-reviewed scan results and notification of material new findings, then align responsible parties around the next actions.
Move from activity to clarity.
Did a new service become exposed?
To answer this, Elteni analyzes known and newly discovered external assets together with exposed ports, services and software versions. The client receives recurring expert-reviewed scan results, with the evidence, context and next steps needed to act.
Which findings represent credible external risk?
To answer this, Elteni analyzes exposed ports, services and software versions together with tLS, certificates, web interfaces and common misconfiguration. The client receives notification of material new findings, with the evidence, context and next steps needed to act.
Are resolved vulnerabilities actually gone?
To answer this, Elteni analyzes tLS, certificates, web interfaces and common misconfiguration together with change over time and urgent exposure. The client receives clear remediation ownership and status, with the evidence, context and next steps needed to act.
The result does not have to live in another report.
Relevant findings, evidence, owners and remediation status can be centralized in the Elteni Platform as part of an ongoing relationship.
Explore the Elteni Platform →