External Attack Surface Reconnaissance and Application Security Score Card.
ImmuniWeb Discovery is a freemium product — only first run is offered for free — but without any restrictions or limitations.
The purpose of ImmuniWeb Discovery is to illuminate your external attack surface and benchmark resilience of your external applications. ImmuniWeb Discovery leverages non-intrusive OSINT technology to detect all external web and mobile applications, domain names, SSL certificates, and even unprotected cloud storage such as AWS S3 buckets attributable to your organization.
Here, you will need to create a free account to start the discovery, but it will barely take one minute of your time. Once registered on the platform and logged-in, just click on the large green button to start ImmuniWeb Discovery.
Then enter your company name and your main website URL (to avoid confusion with same-name companies incorporated in foreign countries):
The process may take from half an hour to one day, depending on how large your company is.
Once successfully finished, you will get an email notification bout it. You will see a dashboard similar to this one:
Visibility and inventory — is the right point to start your application security strategy.
According to our research, some organizations are not aware of up to 80% of the discovered applications — mostly represented by shadow, legacy or abandoned applications. Often, these applications contain internal or sensitive data, including PII and financial records. It’s enough to check FT 500 security report to grasp the emerging problem of chaos in corporate IT assets.
Conclusion: crown jewel in our community products collection, can be a lifesaver and prevent many disastrous data breaches.
