External exposure & risk prioritization
Your attack surface, mapped the way an attacker sees it
Discovery and continuous monitoring from the domains and IP addresses you enroll; discovery beneath each is unlimited.
- Availability
- Not available in the Middle East before Q1 2027
- You enroll
- Root assets only - 5 domains and 10 IP addresses in the base
- Discovery
- Unmetered
- Correlation
- Against Foresyn
Unlimited discovery
Enroll the roots. Cresta maps everything below
Enroll only your root assets: five domains and ten IP addresses in the base. Cresta finds everything underneath, never metered.
You enroll
- Domains
- IP addresses
Third-party domains are watched by Third Party Exposure.
Cresta discoversUnmetered
- Subdomains
- Hosts
- Ports
- Services
- Web applications
- Technologies
Continuous monitoring
Prioritized by exposure, correlated against Foresyn
The discovered estate is watched continuously and prioritized by exposure, with a monitored scope you can adjust as you grow.
Exposure-first prioritization
the estate is ranked by what is reachable, adjustable to your risk appetite.
Vulnerability & misconfiguration detection
across hardware, software, network and cloud configuration, continuously rather than at a point in time.
Exploitability enrichment
exploit, zero-day and real-world exploitability intelligence from Foresyn on every finding.
Scope you adjust
the monitored scope is adjustable and sized with you as the estate grows.
The lifecycle
Five stages, always running
Discovery, assessment, prioritization, remediation and verification run as one continuous loop. The estate never falls out of view.
Discover
Every internet-facing asset beneath your roots: known, unknown and shadow.
Assess
Vulnerabilities and misconfigurations detected across the discovered estate.
Prioritize
Ranked by exposure and real-world exploitability, not CVSS alone.
Remediate
Step-by-step guidance that plugs into patch management and ITSM.
Verify
Cresta re-checks the asset and verifies the fix, with posture reported over time.
Asset coverage
Everything an attacker can reach
Your external footprint, mapped and monitored, with leaked credentials cross-matched when you also hold Nyxel.
- Web
Domains & Subdomains
Full domain footprint, including shadow and forgotten hosts.
- API
Exposed APIs
Discovered and documented, including the ones nobody registered.
- Net
IPs & Ports
Exposed services, open ports and risky protocols.
- Cloud
Cloud Buckets
Open buckets, weak settings and exposed cloud storage, found across every provider the estate uses.
- Certs
Certificates
Expiring, misissued and rogue certificates.
- Nyxel
Leaked Credentials
When you also hold Nyxel, leaked credentials are matched against the exposed services that would accept them.
Integrations
Works with the stack you already run
Findings flow straight into your controls and workflows through the open API no rip-and-replace.
NGFW, IPS & NDR
Block exposed services and known-bad infrastructure at the edge.
SIEM, SOAR & EDR
Findings and IOCs into your SOC workflow, and into Cortex XSOAR through the REST API.
ITSM & patch management
Tickets with owner, context and fix guidance, with verification written back on closure.
Cloud security platforms
Correlate external exposure with your cloud posture.
Shared assets
Enroll once. Choose the modules that protect it
An asset is entered once in one shared inventory and enrolled on each module you choose: the domains and IP addresses Cresta maps can also be enrolled on Nyxel leak matching, and domains on Tellmark brand protection. Each enrollment counts against that module’s own limit.
How licensing worksYour enrolled assetsOne shared inventory
- Domains
- IP addresses
- CrestaMaps the external estate.This page
- NyxelMatches leaked credentials to the same domains.Shared
- TellmarkWatches the same domains for brand abuse.Shared
Get in touch
Map your external attack surface
Ask for the free attack surface scan and see what is exposed before you commit, then enroll your roots and let Cresta find everything underneath.