Overview
What Securelyze is and the four concepts behind everything in it
Securelyze is an External Attack Surface Management (EASM) platform. It discovers the domains, subdomains, and IP addresses that make up your organisation's internet-facing footprint, scans them for security problems, and turns the results into findings you can prioritise and fix — with an AI analyst on hand to explain everything in plain language.
Core concepts
Four terms cover almost everything in Securelyze:
- Assets — the things you're protecting: domains, subdomains, and IP addresses. Assets are either added by hand or discovered automatically.
- Scans — background jobs that examine your assets. There are two types:
- Asset Discovery — finds new assets: subdomains, related domains, resolved IPs, certificates.
- Security Scan — checks existing assets for problems: DNS health, HTTP reachability, SSL/TLS issues, open ports, missing security headers, and more.
- Findings — individual security issues produced by scans (or entered manually), each with a severity score from 0–10 and a status (Open / Fixed / Ignored).
- Attack Surface — a per-domain deep-dive view of everything Securelyze knows about a domain: WHOIS, DNS, subdomains, certificates, infrastructure, services, web, and email security.