Threat intelligence company Flashpoint today announced a new suite of capabilities designed to bridge the gap between threat data and organizational impact, including External Attack Surface Management or EASM, business-aligned Priority Intelligence Requirements and a Managed Attribution Browser.

Revealed during the RSAC conference in San Francisco, the new offerings shift the focus from seeing threats to operationalizing intelligence by connecting adversary activity directly to the people and assets organizations must protect.

Traditional attack surface tools typically only identify what an organization owns but often leave security teams buried under long lists of exposed services and Common Vulnerabilities and Exposures without the necessary context to prioritize them. To address the issue, Flashpoint is launching threat-informed External Attack Surface Management, a service that Flashpoint says evolves EASM from simple asset discovery to threat-informed prioritization.

Flashpoint EASM continuously discovers internet-facing assets such as domains, subdomains and IPs then automatically maps them to Flashpoint’s vulnerability intelligence. The result enables teams to stop guessing and start focusing on the specific vulnerable software and high-risk exposures that threat actors are actively targeting.

The second new capability announced today, business-aligned Priority Intelligence Requirements, addresses the issue where teams are held back by a lack of structural clarity and that without defined priority intelligence requirements, it’s difficult to determine what the business actually needs or how to support it consistently.

Flashpoint argues that as threat intelligence becomes increasingly critical to the modern enterprise, organizations must ensure a clear connection between technical activity and board-level imperatives. The shift, according to Flashpoint, necessitates the use of Priority Intelligence Requirements, which provide an objective framework for organizing intelligence and measuring its impact.

To resolve these structural disconnects, Flashpoint is introducing in-platform Intelligence Requirements in May to define, formalize and operationalize Priority Intelligence Requirements. The capability will allow organizations to ensure that their intelligence programs are measurable, defensible and strategically aligned with business decisions.

Managed Attribution Browser, the third capability announced today, offers a new, non-persistent investigation environment. It allows analysts to instantly spin up an anonymous, disposable browser to engage in underground communities and open suspicious links without risk of compromising their identity or infrastructure.

In an example provided by Flashpoint, a security analyst can use the secure, isolated environment to safely interact with a threat actor on an encrypted messaging platform or open a suspicious file found on a ransomware leak site, all without exposing their organization’s network or their own digital identity to the adversary.

“Visibility alone is no longer a victory; it’s a baseline,” said co-founder and Chief Executive Josh Lefkowitz. “By connecting underground adversary activity to an organization’s specific attack surface and strategic requirements, Flashpoint is raising the bar beyond passive observation. We are enabling defenders to stop asking, ‘What do we own?’ and start answering, ‘What do we fix first and why?’ — turning raw data into an engine for risk reduction at speed.”

Image: Flashpoint