bolt3,000+ free OSINT tools, guides & a growing glossary
The sum of an organisation's exposed systems and entry points visible to an outsider.
An attack surface is everything about an organisation that an outsider can see and potentially target — domains, subdomains, exposed services, leaked credentials, and public employee information. Mapping it is a defensive OSINT exercise: teams enumerate their own attack surface before an adversary does.
The same techniques an attacker would use — footprinting, subdomain enumeration, breach checks — are turned inward to find and close exposures.
Systematically mapping the online presence and infrastructure of a target.
Discovering the subdomains that belong to a domain to map its full footprint.
Intelligence about cyber threats used to anticipate and defend against attacks.
An incident in which private data is exposed or stolen, often ending up in public leak databases.