What are organizations doing wrong when it comes to security?
While today’s code-quality security is good, the sharing between each domain or principle is lacking, such as using infrastructure as code. Some people have become lazy, using other people’s templates and sometimes without knowing the security details. There is no technical depth (the rule now is; if it works, it works). Security metrics are valued by the exploitation that happens. We learn by being hacked, and that is not how it should work.

At the same time, while technical vulnerabilities are being detected, misconfigurations in applications are not so much. Things that have been existing for twenty years are still being exploited. The way we now look at IT security is more about what’s new, trendy, or cool. This threads with the way programming is learned today. It can be considered an evolution, like using dependencies or libraries. But the problem is that those are blindly trusted. Most of the backend runs code that is not written by yourself, yet you don’t mind. While newer programmers are tech-proficient, they might lack a security mindset.

Included by Gartner in 2021 as a major cybersecurity category and an emerging product, the External Attack Surface Management (EASM) term might be new. Still, the idea behind it is nothing new: identifying risks coming from internet-facing assets that an organization may be unaware of.

A few companies, including Detectify, have been highlighting the importance of the attack surface and understanding the potential risks of the constantly-changing environment. Gartner’s addition of EASM as an emerging product demonstrates an increasing awareness of the necessity for organizations to be aware of the threats that exist through their internet-facing assets.

Detectify is the only fully automated External Attack Surface Management solution powered by a world-leading ethical hacker community.

By leveraging hacker insights, security teams using Detectify can map out their entire attack surface to find anomalies and detect the latest business-critical vulnerabilities in time – especially in third-party software. The only way to secure your attack surface is to hack it but it doesn’t have to be complicated.

With Detectify, continuous security starts with a few clicks. Go hack yourself.

Visit us at detectify.com to learn more.