Last year, the NCSC completed our first phase of research into attack surface management (ASM) in order to gain better market understanding of external ASM products.
The research (the full version is available from our website) identified a strong and diverse market supporting EASM products with a range of features at various of price points, suitable for many different organisations.
With insights into market differentiators, approaches to risks and authorisations that this research revealed, we were able to publish the NCSC’s External Attack Surface Management (EASM) buyer’s guide, to help you identify if using an EASM product is right for you and your organisation, and if so how to pick one.
We’re now announcing the next phase of our EASM research, and are reaching out to the widest possible range of organisations to get involved.
If you work for an organisation that uses EASM or other exposure management solutions, or you’re a professional with expertise and responsibilities in this ASM domain, we’d like to hear from you.
You might be someone who:
- reviews exposure assessment findings
- reports on external attack surface risks and recommends next steps
- has implemented exposure management methods or tools
- has experience using exposure management solutions


