Known and unknown infrastructure
Separate verified inventory from possible shadow assets. Every attribution shows the public signals behind it and an explainable confidence level instead of silently treating a guess as fact.
External attack surface management
Know what changed outside — and prove what happened next.
OUTSIDE starts with passive discovery, then keeps the observation, attribution, decision, remediation, and external verification connected in one evidence-first workflow.
Change, not another static list
Guardian compares observations over time and distinguishes new, returning, disappearing, and materially changed exposure so the team can focus on what actually moved.
Connected attacker journeys
See how domains, certificates, DNS relationships, services, technologies, and evidence connect into a plausible external path without performing exploitation or credential attacks.
Safe validation with authorization
Passive evidence remains separate from active checks. Supported validations require scope and authorization, use fixed defensive checks, and preserve the result and its provenance.
Remediation that closes the loop
Every recommendation carries evidence and a concrete operator path. Supported provider actions require approval, stay scoped and reversible, and are followed by an external re-check.
Historical reconstruction through Chronos
Reconstruct what the public surface looked like at an earlier checkpoint, compare it with today, and retain the observation trail needed for investigation, reporting, and accountability.