How Recorded Future Attack Surface Intelligence Shines a Light on Blind Spots

Replace Trust with Trusted Intelligence

A US State Agency uses Recorded Future to ensure all state agency assets are in policy. A critical tool for validation, Attack Surface Intelligence helped the state transition from a trust-based system, with state agencies and vendors, to an evidence-based system that allows them to confidently manage their internetfacing infrastructure. Access to essential intelligence, such as risk details and vulnerable applications, streamlines their web-based risk identification, communication, and remediation process, while simultaneously eliminating the need for additional research.

Gain a Persistent View for a Dynamic Portfolio

Attack Surface Intelligence helps a large North American beverage company keep track of external-facing assets that their decentralized marketing departments consistently fail to alert them about. With a persistent view of their attack surface, the company can easily track when new assets are spun up to ensure that they’re also wound down appropriately. Additionally, by easily being able to view screenshots of their associated assets, the company has found divestitures that were still using their terms and conditions. Visibility into this problem has greatly helped in their efforts to maintain domain hygiene and remove associations from brands no longer under their umbrella.

Improve Detection Capabilities

A Security Operations Manager for a communications company highlighted Recorded Future’s ability to provide their team with a superior collection of actionable data, across all of their assets, than they were previously receiving or even aware of. Access to a much larger attack surface footprint than before combined with a clean user interface and intuitive user experience makes it easy to quickly identify and remediate potential soft spots on their perimeter, such as ports that shouldn’t be open.

Keep Critical Ports from Being Exposed

A large financial services company in India has found Attack Surface Intelligence to be invaluable for detecting critical ports not meant to be open. While protections are often in place for the company to ensure outsiders can’t access critical ports, some were temporarily opened but mistakenly not closed. Using Attack Surface Intelligence has helped them design new workflows to ensure these inadvertent mistakes do not repeat.

Make Unknown Assets Known

A large publicly-traded software company uses Recorded Future to continuously find unknown assets. Attack Surface Intelligence surfaces subdomains that the company lacks insight into, enabling them to determine site legitimacy and quickly take the appropriate action, whether that’s decommissioning the site or adding to their asset logs for future scanning. Leveraging an outside-in view of their attack surface helps the software company strengthen their perimeter by removing potential attack vectors.

Enhance Workflow Efficiency

For a North American biotech company, Attack Surface Intelligence has become fundamental for their daily workflows. Before using Recorded Future, the company employed a time consuming and tedious workflow to sort through newly active hostnames and identify those that appeared to be out of policy. A process that used to cost the biotech company weeks or months of discovery effort has been greatly reduced with easy access to comprehensive intelligence on all of their domains in one solution.