Internal Attack Surface Management (ASM)

my-S NPMS

Know your internal assets. Keep track of service changes.

my-S NPMS is an internal attack surface management (ASM) solution that discovers assets, services and ports on internal networks, with scheduled checks and change tracking to reduce security blind spots.

GS Grade 1

Deployment overview

Sample port change
Scope
Internal networks you are authorized to scan
Before deployment
Target IP ranges, scan frequency, and your policy for risky ports
What you can see
Asset inventory, service and port change history, and risk levels based on your policy
Turn discovered assets into an inventory you can maintain.

  1. Discover assets

    Identify connected internal assets

  2. Analyze services & ports

    Review open services and ports

  3. Track changes

    Scheduled checks, alerts and reports

Close the gap between your inventory and your network.

Assets missing from the inventory

Review network assets to identify newly connected devices and gaps in the management inventory.

Services needing review

Review open ports and services to support decisions about unauthorized or unnecessary services.

Changes after an assessment

Use scheduled checks to track asset and port changes beyond a single inventory snapshot.

Four capabilities for internal attack surface visibility

Internal asset discovery

Scan the network to discover connected assets and organize the internal asset inventory.

  • Discover connected network assets
  • Maintain the asset inventory

Service & port analysis

Identify open ports and service information to help teams find review priorities under their own operating standards.

  • Review services and ports
  • Support decisions on unnecessary services

Scheduled checks & change alerts

Track changes in assets and ports through periodic checks and use port change alerts to identify items requiring attention.

  • Track asset and port changes
  • Receive port change alerts

Statistics & reports

Organize status and change information in statistics and reports to support team communication and follow-up decisions.

  • Review operating statistics and reports
  • Share results for follow-up review

Sample port change

Simulated data

In this example, the organization’s scanning policy flags Telnet as risky.

Target IP
192.0.2.24
Port and service
TCP 23 · Telnet
Previous scan
Not detected
Current scan
Detected · Risky port

From asset discovery to operational review

  1. Define the scope

    Agree the scope and conditions for internal networks that the organization is authorized to inspect.

  2. Discover & review

    Scan the network, identify assets, services and ports, and organize the items for review.

  3. Track & act on changes

    Use recurring checks, alerts and reports to track changes and support remediation decisions and reassessment.

Where should your internal attack surface review begin?

Discuss product scope and operating requirements for your environment and management goals.

Discuss my-S NPMS