
External attack surface management (EASM)
See your perimeter the way attackers do.
Nulink Exposure Management maps your external attack surface. Give it a domain and it finds the subdomains, hosts, certificates and services connected to you, surfaces the ones nobody knew about, and keeps watching for changes.
From one domain to a full external inventory.
- 01
Add your domains
Start with the domains you own. There's nothing to install and no credentials to hand over.
- 02
Discover
Nulink expands each seed into subdomains, IP addresses, hosts and certificates using public sources such as DNS and certificate transparency logs.
- 03
Assess
Every asset is fingerprinted: which services answer, what software they run, whether their certificates and DNS records are healthy.
- 04
Monitor
Your surface is rescanned continuously and you're alerted when a new host, port, certificate or lookalike domain appears.
Six ways of looking at your perimeter.
Compare plans
Asset discovery
ASMStart from a domain and map every internet-facing host, IP address and service tied to it.
Read more
Subdomains and lookalikes
DNSCatch forgotten subdomains, dangling DNS records and domains registered to impersonate you.
Read more
Shadow IT discovery
Shadow ITSurface the servers, sites and services someone launched without telling security.
Read more
Certificate monitoring
CT logsWatch certificate transparency logs for every certificate issued for your domains.
Read more
Internet service intelligence
ServicesSee which ports and services are exposed on your hosts, and which run vulnerable versions.
Read more
Continuous monitoring
MonitoringRescan your external surface continuously and get alerted when something new appears.
Read more
Why an outside-in view matters.
- Outside-in
- Exposure Management works from what's publicly visible, which is exactly the view an attacker starts with.
- Finds the unknown
- It compares what's on the internet with what you think you run, and highlights the difference.
- Continuous, not annual
- A penetration test is a snapshot. Your surface changes every week, so the monitoring doesn't stop.
- Use it on its own
- No cloud connectors required. Pair it with Nulink Cloud when you want the inside view as well.
Works from
- Any domain
- Any hosting provider
- DNS records
- Certificate transparency logs
Also from Nulink
Nulink Cloud
Nulink Cloud is an agentless CNAPP for AWS, Azure and Google Cloud. It checks your cloud configuration, infrastructure code, application code and dependencies, maps every finding to the frameworks you're audited against, and tells you what to fix first.
Explore Nulink Cloud

Visibility is security. Start with yours.
Book a 30-minute walkthrough with the team, or connect your first account and see results today.