BERRY9 IT Services, home +91 86868 92922

External Attack Surface Management in India

Ask a CISO to list every public-facing asset their organization owns and you will get a list that is usually wrong, usually incomplete, and usually three years out of date. Subsidiaries, acquisitions, marketing microsites, dev environments left on the public internet, S3 buckets registered against someone's personal email — they all exist, and they are all attackable. External Attack Surface Management (EASM) is the discipline of finding them before someone else does.

Request a scoping call Call +91 86868 92922

Network · By Thimmagurudu Bathini · Published · 6 min read · Last reviewed

The discovery flow

For Indian enterprises, we typically start from the root domain and pivot outward using passive sources (Certificate Transparency logs, passive DNS, Shodan, Censys) and active enumeration (subdomain bruteforce, vhost enumeration). Acquisitions appear in financial filings, trademark registrations, and old press releases — all worth correlating.

Typical examples of forgotten assets

  • A dev environment of the customer portal, several versions behind, with default credentials
  • An old marketing landing page for a product launched in 2018, still serving from a forgotten EC2 instance
  • A subdomain CNAMEing to a now-defunct SaaS provider, takeoverable by anyone who registers the dropped name
  • The CEO's personal blog, hosted on a server with the same shared hosting as the corporate site
  • A staging environment of the mobile API, identical to production but without rate limiting

Frequency

Attack surface is not static — every new feature, marketing campaign, or acquisition expands it. We recommend continuous EASM (monthly delta reports) for enterprises above a certain size, and quarterly external pen-tests against the most exposed assets. Our network engagement covers external surface as a dedicated phase.

Written by Thimmagurudu Bathini, BERRY9 IT SERVICES PRIVATE LIMITED, Hyderabad. Questions about your own systems? Request a scoping call or call +91 86868 92922.

Plan your next security test

Tell us what needs testing and when you need it done, and we will propose a scope and timeline. We respond within 24 hours. If you would rather talk first, call or write to us.

Request a scoping call WhatsApp