Attack Surface and Attack Path Analysis
Asset and Access Relationship Mapping
We consolidate how users, devices and applications can access each other into a single model. We reveal connections not shown in the inventory.
What it is
An inventory lists assets individually. Attackers exploit relationships between assets. An open admin session on a server, a local administrator right or a firewall rule are such relationships. Mapping extracts these from identity and network data and combines them in one graph.
Scope
- Group memberships, permissions and session data in Active Directory and Entra ID
- Local administrator rights and remote access permissions on servers
- Network reachability derived from firewall rules
- Cloud IAM roles and inter-account trust relationships
- Application service accounts and connected databases
The need
When organizations need it
- When management asks what could be accessed if a single account is compromised.
- When a merger, cloud migration or new identity platform changes access relationships.
- When you need a map of current access before a segmentation or least-privilege project.
Method
How we work
-
Data collection
We collect most data read-only using a standard user account.
-
Network layer
We add firewall rules and routing data to determine which system can reach which.
-
Modeling
We combine all relationships in one graph and mark your critical assets.
-
Handover
We deliver the model and the findings. The model serves as a basis for future attack path analysis.
Outcome
What you have at the end
You receive a current access model showing who can access which system and with what rights. Unexpected access and excessive privileges are listed as findings.
Frequently asked questions
Does data collection make any changes to our systems?
No. Collection is read-only and no agent is installed on your servers.
Where is the collected data stored?
At the start, we agree with you in writing where the data is processed and when it is deleted.
Attack Surface and Attack Path Analysis
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting