Subdomain Monitoring (EASM)

The Subdomains page provides External Attack Surface Management (EASM) capabilities, allowing security teams to discover, monitor, and assess risks associated with their organization’s internet-facing assets.

---

Features

Subdomain Discovery

• Automated enumeration of subdomains for monitored domains
• DNS record tracking (A, AAAA, CNAME, MX, TXT)
• New subdomain detection alerts

Certificate Monitoring

• SSL/TLS certificate expiration tracking
• Certificate transparency log monitoring
• Misconfiguration detection (expired, self-signed, wrong domain)

Risk Scoring

• Risk assessment based on:
  • Open ports and exposed services
  • Certificate health
  • DNS configuration issues
  • Known vulnerability associations

Change Detection

• Historical tracking of DNS record changes
• Alert on unexpected IP address changes
• New service exposure notifications

---

Access Requirements

Subdomain monitoring requires the Respond (MDR) tier or above.