📢 New: Continuous AI Pentesting. Always-on, across all exposed assets. Learn more 📢 New: Continuous AI Pentesting.
CyCognito Blog
Graham Rance

Search the Blog

By Graham Rance ・

External Attack Surface Management (EASM) promised to illuminate the unknown, but early tools barely scratched the surface, relying on what security teams already knew. Today’s attacker-centric EASM flips the script, discovering unknown assets, mapping them to the business, and validating real-world risk with zero input. The result isn’t just visibility—it’s proof of exposure, and a clear path to action.

Read more about External Attack Surface Management Promised Visibility — But Did It Deliver?
By Graham Rance ・

A survey of cybersecurity professionals in the U.S. and U.K. reveals challenges in web application security testing. Key findings include extensive attack surfaces due to numerous in-house and third-party applications, frequent security incidents, concerns about the effectiveness of existing tools, and inadequate testing coverage. Additionally, over half of respondents struggle to remediate discovered vulnerabilities. These findings highlight the need for improved web application security testing strategies.

Read more about Web Application Security Testing: Struggles, Shortfalls and Solutions