Frequently asked questions about EASM with Sweepatic

An EASM platform is a cloud-native solution that
continuously discovers, analyzes, and monitors everything connected to your company’s online exposure — domains, websites, hosts,
services, technologies, SSL certificates, etc. It provides real-time feedback on changes and issues occurring in the external attack surface of your organization.

Firstly, you get situational awareness of all changes in your online attack surface. You are the first to learn about any vulnerability or issue that may encourage bad actors to attack. Moreover, you reduce the risk of a cyberattack by finding and remediating vulnerable assets that your organization is using. In addition, an easy-to-operate solution, continuous scanning, and prioritized insights (“what to address first”) unburden your cybersecurity team, who get extra time for other tasks.
Contact us to learn all the benefits of the Sweepatic EASM Platform.

Sweepatic was founded in 2016 as one of the first in the Attack Surface Management field. The company is rapidly growing and appreciated for its innovative, user-friendly solution and expertise, among others, by Gartner, Cyber Security Made in Europe, Sibelga, Cegeka, and many other customers. What really makes us outstanding is our customer-first approach. Do you have a feature in mind or an integration request? We promise to help you out shortly.

Onboarding is quick and easy! You don’t need to install any software or agents. The platform is cloud-native and accessible by securely logging in via your internet browser.
Sweepatic applies a “zero-knowledge approach,” meaning the only information the platform requires to start is either a company name or a primary domain.
Maintaining a complete and accurate scope definition is very important. Hence, Sweepatic enables customers to complete their scope, at all times, by suggesting new primary domain candidates, importing additional IP addresses, etc.

The main difference between the 2 solutions and External Attack Surface Management is that EASM is non-intrusive, continuous, and includes the scanning of unknown assets.

All 3 solutions provide digital risk protection using different techniques and approaches. A vulnerability scanner discovers IT assets within the known ranges of defined IP addresses. You get the results upon scanning request. A penetration test, on the other hand, aims to test a specific app or discover and execute a break-in scenario. An EASM solution gives insight into known and unknown internet-facing assets 24/7. It derives the results from non-intrusive scanning. Get more insights from this blog article.

The Sweepatic EASM Platform starts running once we add your organization’s primary domain(s) to your scope. To get an overview of the initial scanning results, you may need to wait a few hours up to a few days, depending on the size of your attack surface — the platform needs more time to retrieve, analyze, and present the complete overview of large scopes (like governments). After completing the initial scanning, Sweepatic continues analyzing your scope 24/7. Hence, you always stay up to date with any changes.

Thanks to the notification and integrations in the Sweepatic Platform, you receive alerts whenever a change occurs in your organization’s attack surface. You can choose to get alerts per scope,  per type of observation (risks), per new asset, and per priority. Notifications can be sent through email, Slack, Microsoft Teams, or an integration of the customer’s choosing via a Webhook.

Yes! The Sweepatic EASM gives you the possibility to track leaked credentials. Learn more about the latest Threat Intelligence module added to the Platform. 

We would love to hear from you. In the main menu, navigate to the company and then the contact section.