The platform

EASM platform:
monitor your external risks.

Nine modules to monitor your exposure and that of your third parties, bringing together external signals to inform your cyber risk decisions.

Module 01 · EASM

Attack surface mapping

Automatic, continuous discovery of everything your company exposes on the Internet — including what you have forgotten.

  • Enumeration of domains, subdomains, IPs and network ranges
  • Detection of exposed services, certificates and technologies
  • Shadow IT: forgotten cloud assets, pre-production and test environments
  • Multiple scopes: subsidiaries, brands and geographic regions
app.artifhack.com/surface
247Discovered assets
31Subdomains
12Shadow IT
www.acme-corp.comapi.acme-corp.compreprod.acme-corp.commail.acme-corp.comstaging.acme-corp.comvpn.acme-corp.com188.165.53.185grafana.acme-corp.comportal.acme-corp.comdev.acme-corp.com
Module 02 · Artifacts Discovery

Data leak detection

Your secrets should never be public. Artifhack finds them before an attacker exploits them.

  • Exposed .env files, backups and Git configurations
  • API keys, JWT tokens and plaintext passwords
  • Exposed emails, phone numbers and personal data
  • Monitoring of the public web, code repositories and dark web
app.artifhack.com/artifacts
64Artifacts · 18 types
58Critical
5High
ValueTypeSeverityScore
mail.acme-corp.com/.env.env fileCritical89.0
sk_live_3aea0f95abf88daa1…API keyCritical80.0
app.acme-corp.com/backup.zipArchiveCritical75.0
eyJhbGciOiJIUzI1NiJ9.HVow…JWT tokenHigh70.0
app.acme-corp.com/.git/configGit configHigh73.0
Module 03 · Breach Intel

Data breach intelligence

When your data appears in a breach, every hour counts. Artifhack alerts you immediately.

  • Detection of your domains in compromised databases
  • Leaked username / password combinations
  • Monitoring of criminal forums and markets
  • History: which data, which source, which date
app.artifhack.com/breaches
14 @acme-corp.com accounts in “Collection #47”combo list · criminal forum · 2 hours ago
VPN credentials detected for saledark web market · 1 day ago
3 emails in the “SaaS-CRM 2026” breachleaked database · 4 days ago
Module 04 · Dark Web Monitoring

Dark web monitoring

What is said and sold about you in places you cannot access. Our collectors continuously monitor criminal spaces.

  • Criminal forums, marketplaces and Telegram channels
  • Ransomware groups' leak sites
  • Initial access offered for sale: VPN, RDP and admin accounts
  • Mentions of your brand, domains and executives
app.artifhack.com/darkweb
3Critical mentions
11Monitored sources
24/7Continuous collection
VPN access to “French industrial company” for sale — $2,400criminal marketplace · strong match · 5 hours ago
Mention of acme-corp.com on a Telegram channelcredential resale channel · 2 days ago
No mentions on ransomware leak sites18 groups monitored · checked 1 hour ago
Module 05 · Brand Protection

Brand protection

Attackers also impersonate your company to target your customers and teams.

  • Typosquatting and lookalike domain registrations
  • Cloned sites and phishing pages using your identity
  • Fake social profiles and job postings
  • Timestamped evidence ready for takedown requests
app.artifhack.com/brand
17Similar domains
2Active cloned sites
4Fake profiles
Domain / profileTypeStatusScore
acme-corp.coTyposquattingActive88.0
acme-c0rp.comCloned siteActive85.0
acme-corp-rh.comFake job postingActive71.0
@acme.corp.officielFake social profileReported66.0
acme-corp.netParked domainMonitored41.0
Module 06 · Correlation Score

Vulnerability correlation scoring

The core of Artifhack: combine exposure, leaks and breaches to reveal real attack paths — and prioritise them.

  • Per-asset, per-scope and company-wide scores
  • Weighted by actual exploitability rather than raw CVSS
  • Trends over time: demonstrate the impact of remediation
  • Readable by executives, actionable by a SOC
app.artifhack.com/exposure
vpn.acme-corp.com exposed (port 443, old version)signal 1 · exposure · +18 pts
VPN credentials found in a recent leaksignal 2 · data leak · +24 pts
Associated account found in an active breachsignal 3 · breach · +31 pts
CRITICAL ATTACK PATH — 91/100
likely compromised VPN access
Module 07 · Monitoring

Alerting & continuous monitoring

Your attack surface changes every day. Artifhack monitors it every hour.

  • Real-time alerts: email, Slack, Teams, webhook
  • Thresholds by severity and scope
  • Detection of new assets and configuration changes
  • Response workflow: open, in progress, resolved
app.artifhack.com/alerts
CriticalNew exposed .env file on api.acme-corp.com12 minutes ago
HighNew subdomain detected: staging.acme-corp.com1 hour ago
CriticalCredentials detected in a new breach3 hours ago
MediumTLS certificate expiring within 7 days (mail.acme-corp.com)6 hours ago
High“Canada subsidiary” scope score: 61 → 74yesterday
Module 08 · Reports

Reports & compliance

Deliverables ready for audits, executives and insurers — generated in one click.

  • Executive report: score, trend and top risks
  • Detailed technical report per asset and signal
  • Mapping of covered NIS2 and ISO 27001 requirements
  • PDF & CSV exports, timestamped history for evidence
app.artifhack.com/reports
NIS2Art. 21 — Covered
ISO 27001A.5 / A.8 — Covered
PDF · CSVUnlimited exports
ReportPeriodScope
Executive report — Q3 2026QuarterlyGlobalPDF ↓
Detailed exposure — JulyMonthlyAll scopesPDF ↓
Open critical artifactsReal timeCanada subsidiaryCSV ↓
Module 09 · Third-party scoring

Assess third-party cyber risk

Assign a cyber risk rating to suppliers, partners and prospective subsidiaries. Get a concise view of their external exposure to prepare a collaboration, acquisition or integration.

  • Suppliers and partners: assess risks before committing
  • Prospective subsidiaries: inform acquisition and integration decisions
  • A rating for each third party to compare external exposure
  • A summary to guide further checks and discussions
Third-party scoring

Illustrative example · fictional companies and ratings

Third partyRelationshipRisk rating
Company AlphaSupplier32 / 100
Company BetaPartner58 / 100
Company GammaProspective subsidiary76 / 100

See the platform on your scope.

A live demo with your own domains. 30 minutes, with no commitment.

Request a demo