UC-144 Attack Surface Management and Analysis

Recent advancements in AI have made knowledge more accessible, but this also introduces risks, as vulnerabilities can now be quickly found and exploited. To address this, we developed a comprehensive, cloud-native attack surface monitoring suite in Google Cloud. Integrating open-source intelligence tools like OWASP Amass and Project Discovery, along with custom Python-based processing, we gather extensive security data—covering subdomain enumeration, open ports, HTTP responses, and DNS configurations. This data is stored in BigQuery, processed, and visualized in Looker Studio for easy client interpretation. A containerized, scalable backend with a Flask-based API ensures seamless tool integration and adaptability. BigQuery ML further classifies domains’ security, empowering organizations with proactive risk assessment and attack surface monitoring.