Remember that embarrassing photo of you from 9th July 2016? Don’t worry Facebook memories will remind you of 'On This Day' 10 years ago.
Unfortunately, there's no friendly reminder for forgotten websites, files, or applications published under your company brand. Often it shows up as an incident call at 4:45pm on a Friday when alerts show someone has accessed your data from a country you have no operations in. Ah, the dreaded digital footprint.
Attackers are scanning the Internet daily for low-hanging fruit. A Github repository containing proprietary code accidentally made public. A legacy website with acritical vulnerability that was supposed to be decommissioned. Company domains available for takeover due to unmaintained DNS records.
Over the last several decades, companies have increasingly expanded their digitalfootprint online. Projects are started, changed, abandoned, completed. People come and go. With the focus on innovating and growing quickly, it has become increasingly difficult to keep track of what you've published on the Internet: your digital footprint.
So how do you understanding your digital footprint?
- Discovery: We start by using a combination of tools to scan the Internet for domains, IP addresses, devices, websites, third-party software as a service (SaaS) repositories...anything related to your company's brand.
- Analysis: Then, we comb through the results and see if we can find any sensitive data that shouldn't be public, websites with outdated software, or domains no longer in use.
- Exploitation: Verify the impact of what we found in step . Can we login using default credentials to exposed administration portals? Can we take over the contents of a website domain you've forgotten about?
- Reporting: In addition to providing an updated inventory of your public assets, we provide a detailed report and walkthrough of any vulnerabilities we found and recommendations on how to fix them.
- Continuous Monitoring: Your digital footprint is constantly shifting. Whilst tooling is available to constantly monitor the Internet for existing, new or changed assets, it requires human oversight to assess these assets for risk and exposure.
Aurguard can provide external perimeter discovery and testing services to help you understand your organisation's digital footprint and protect the assets, reputation and peace of mind you've worked hard to build.
For more information, contact us at hello@aurguard.com
