Fix what attackers see first
Mondoo finds your internet-facing hosts the way an attacker does, starting from a domain you own. It checks every host for TLS, DNS, HTTP and email security and known vulnerabilities, scores it by risk, and attaches the fix to the checks it fails. The next scan confirms it's closed.
- DMARC policy missingFix: Add a DMARC record: v=DMARC1; p=quarantine
- HSTS header missingFix: Add Strict-Transport-Security: max-age=31536000
- Discovery from a single domain
- Fixes attached to failed checks
- The next scan confirms it's closed
Your inventory only covers what you deployed on purpose
It misses the agency microsite from two years ago, the staging host with a public DNS record and the mail domain with no DMARC policy. Attackers find those in an afternoon, because they start from the outside.
A longer list of exposed hosts isn't progress. Fewer open exposures is.
From one domain to fixed exposures
Add a domain
Add a domain you own and choose how often to scan it.
Discover
Mondoo finds the subdomains, hosts, open ports, services and technologies an attacker would see.
Check
Every host is checked for TLS, DNS, HTTP and email security and known vulnerabilities.
Score
Each host and your whole external attack surface get a risk score, so you know where to start.
Fix and confirm
Apply the attached fix, ticket it or set an exception. The next scan confirms it's closed.
What Mondoo checks on every host
The core checks run on every scan. Heavier checks are yours to switch on.
| Always on | What it catches |
|---|---|
| TLS and certificates | Expiring or misconfigured certificates and weak TLS settings |
| DNS | DNS records that expose or misroute your hosts |
| HTTP security | Missing or weak security headers, such as HSTS |
| Email security | Mail domains without protection against spoofing, such as a missing DMARC policy |
| Known vulnerabilities | Exposed services running versions with known CVEs |
| Opt-in | What it catches |
|---|---|
| Dynamic application security testing (DAST) | Vulnerabilities in your web applications, tested from the outside |
| Subdomain takeover | Subdomains pointing at services you no longer control |
Open ports and detected technologies are listed for context, without adding to your risk score.
Failed checks come with the fix
Most attack surface tools stop at the list. Mondoo hands you the fix: the DMARC record to publish, the HSTS header to add, the steps to renew a certificate. Copy it, ticket it in the workflow your team already uses, or set an exception with a reason. The next scan confirms it's closed, so you can show the exposure is gone, not just reported.
Every exposed host you own, with the fix attached.
You decide what's yours
Discovery finds everything that points back to your domain, including hosts you may not own or no longer care about. Mark each discovered host as managed or ignored. Ignored hosts drop out of your counts and your risk score, so the view reflects the attack surface you're actually responsible for. Deciding what should be exposed stays with you.
The outside view, next to everything else you secure
Discovered hosts become ordinary Mondoo assets, alongside your endpoints, servers, cloud, SaaS, code and AI. Attack surface scanning shows what an attacker sees from the outside. Mondoo's scanning of the systems you run covers what's behind it, so external and internal exposures are fixed in one place.
Built for teams who need to see their estate from the outside
- Security leads who inherited an estate and need to know what's really out there.
- Teams after an acquisition, taking on domains and hosts nobody has documented.
- Anyone whose inventory only covers what they deployed on purpose.
- MSSPs running exposure assessments for their customers.
Where attack surface management fits
Attack surface management is the first move in a broader program: knowing what's exposed. Vulnerability management finds the weaknesses on the assets you already know about. Continuous threat exposure management (CTEM) is the operating model that keeps prioritizing and closing exposures over time.
Continuous threat exposure management
Frequently asked questions
See what attackers see, then fix it
Get an assessment and see your internet-facing hosts, the exposures that matter most, and the fix for each one.
Fix Now. Fix Forever.