Cybersecurity company CrowdStrike Holdings Inc. today announced it has expanded its Falcon platform to deliver enhanced adversary-driven External Attack Surface Management technology.

The expansion includes the introduction of Falcon Surface, a new standalone module that features capabilities from CrowdStrike’s recent acquisition of Reposify Ltd. The module delivers advanced EASM with enhanced adversary intelligence and real-time discovery of internet exposures.

CrowdStrike argues that traditional security solutions leave critical blind spots for external attack surfaces, with only 9% of organizations monitoring 100% of their attack surface. Falcon Surface reimagines EASM by enabling organizations to understand the external attack surface from an adversary’s perspective based on the company’s threat intelligence.

Falcon Surface uses a real-time 24/7 engine to scan the entire internet to identify risky exposure of known and unknown assets. Scanning based on domain addresses, the service is claimed to provide unmatched data accuracy with advanced attribution techniques and actionable remediation steps.

Advantages of Falcon Surface include continuous visibility into an organization’s exposed assets and security posture, allowing organizations to stay on top of any changes with an always up-to-date asset inventory. Insights from the service are tailored to customer needs, delivering information on exposures and security issues that are flagged and prioritized.

Falcon Surface also allows users to generate an action plan that automatically suggests remediation steps to quickly minimize the risks that have the biggest impact on their security posture.

Claiming that “CrowdStrike is uniquely positioned to win in the EASM market,” Chief Technology Officer Michael Sentonas cited advantages including the ability to understand external attack surfaces as seen by threat actors and the integration of information technology hygiene, vulnerability management and EASM modules to deliver a unified security platform with a single, lightweight agent.

Along with the introduction of Falcon Surface, CrowdStrike also said that it is integrating EASM technology across the Falcon platform, starting with its Threat Intelligence product suite and Security & IT Operations product suite.

The integrations of Falcon Surface will enable organizations to gain expanded visibility into external adversary activity within Falcon Intelligence. Users can stay ahead of attackers by monitoring criminal activity across the dark web, including their malicious tools and tradecraft with external attack surface data to harden risky, exposed assets.

Within Falcon Discover and Falcon Spotlight, users obtain a 360-degree view of the enterprise attack surface and exposures from both the outside-in and inside-out with integrations across CrowdStrike’s IT hygiene and vulnerability management modules.

Falcon Surface and the integration with Falcon Intelligence Recon are now generally available for customers. Integrations with Falcon Spotlight and Falcon Discover are expected to be generally available in the second half of 2023.

Image: CrowdStrike