What is exposure management?
Attackers do not look at a single vulnerability. They combine a weak spot in the cloud with a misconfigured account and a server that has not been updated. Exposure management looks the same way: all risks together in one picture.
It combines attack surface management (what is there and what can be reached) with vulnerability management (where the vulnerabilities are) and adds context. That way you see which weak spots can really lead to damage.
What it delivers
- One risk picture: inside and outside, on-premises and cloud.
- Priority with context: first what is reachable and business-critical.
- From insight to action: fix with patches and configurations, also automatically.
- Measurable: you see whether risk goes down, and can show it.
Which Rapid7 products?
- Exposure Command: the Rapid7 exposure management platform. In the Essentials package with vulnerability management and attack surface management, in Ultimate also with cloud and application security.
- InsightVM: the scanner for vulnerabilities within your network.
- Surface Command: your attack surface from the outside.
- Active Patching: fix vulnerabilities automatically, built on Automox.
How Brandaris uses it
With exposure management we answer two questions: how vulnerable are we today, and what do we fix first? We start with a baseline assessment, draw up an improvement plan and track progress. If we link it to the next-gen SIEM or MDR, detection also knows which systems are vulnerable.