Attack surface management
See what is exposed on the domains you have verified
The attack surface workspace lists the hostnames, network services and web responses observed for your verified domains, together with the findings they produced and the scan that found them.
What the workspace shows
Every view belongs to one verified domain and shows the scan state behind its results.
Asset inventory
Hostnames and related assets observed for the domain, including new entries and ones that are no longer seen. You can search and filter the list.
Services and web responses
Network services and web responses recorded for an asset, when a check has produced them.
Findings
Severity, the evidence and the affected asset side by side, with a review step for each finding.
Scan activity
Queued and finished scans, run history, and the runs where discovery was limited or could not finish.
Changes over time
What appeared, changed or disappeared in the inventory and findings between runs.
Team access
Colleagues you invite see the same workspace. What each person can do depends on their role.
Attack surface management
How to start
Domain ownership, passive discovery and active checks are separate steps.
- 01
Verify the domain
Add the domain under Monitoring and complete the ownership check. Only verified domains become scan targets.
- 02
Review discovery
Look through the observed assets, where each one came from and whether discovery has finished.
- 03
Work through findings
Open the asset and service behind a finding and record your review.
- 04
Check what changed
Return to the run history to see what appeared, changed or is no longer observed.
Limits
Limits of a scan
- 01
Results are limited to what the runs found.
- 02
Active checks run only on targets you have explicitly approved.
- 03
A full vulnerability assessment still needs a penetration test.
Questions
Questions before you start
Do I need to verify a domain?
Yes. The workspace only works with domains you have verified, on the Enterprise plan. If none is ready, the workspace takes you to the step for adding one.
Will LeakData actively test every discovered IP address?
No. Active checks need a separate authorization and stay inside the approved targets. Passive discovery and active findings are shown separately.
Does an empty findings list mean the domain is safe?
No. Results depend on the sources, scope and completion of each run. Check the coverage and date of the last run before drawing a conclusion.
Can colleagues review the same workspace?
Yes. You can invite members with workspace roles; what each member can do depends on their role.
Start with a domain you have verified
Open the workspace if your account is on Enterprise, or ask us about Enterprise access.