Red Sift ASM (Attack Surface Management) continuously discovers, inventories, and helps manage your business’s critical external-facing and cloud assets. Red Sift ASM provides a comprehensive view into your entire attack surface, including assets you didn't know existed. It leverages unmanaged attack surface data to identify mismanaged assets and continuously scans domains, hostnames, and IP addresses for fresh data. Red Sift ASM integrates with cloud providers, certificate authorities, registrars, and managed DNS providers to import and monitor your assets, providing visibility into cloud accounts. It features DNS and DNSSEC monitoring to identify dangling DNS issues that could risk subdomain takeover. Red Sift ASM validates your DANE configuration and checks all known SSL and TLS protocols, cipher suites, named groups, and other cryptographic primitives. It simulates connections from popular clients to understand negotiation with your sites and deploys relevant standards such as HSTS, CSP, SRI, and others. Red Sift ASM prevents mixed content and checks for STARTTLS and correct TLS and PKI configuration. It also deploys SPF, DMARC, and MTA-STS. Red Sift ASM combines external-facing and cloud asset information with certificate data, integrating this into the Red Sift Platform. It helps discover and protect known, unknown, and lookalike assets, sharing findings across tools for a complete view of your attack surface.
