Exteriq ASM Beta On-premises
Know what your organisation exposes to the internet.
Exteriq ASM is Al-Rasedah's own Attack Surface Management (ASM) product. It finds the domains, addresses, and services linked to your organisation, keeps them in one inventory, and shows what changed between scans.
Product walkthrough · 2:50
See Exteriq ASM in action.
The beta on demo data: the dashboard, a scan, the asset inventory, findings, and the executive report.
Demo environment with example data. The product interface is currently in English.
Part 1
What ASM is.
Your attack surface is everything an organisation has reachable from the internet: domains, subdomains, IP addresses, open ports, web applications, and certificates. It grows quietly as teams launch services, suppliers publish on your behalf, and old systems are forgotten.
Discover
Find internet-facing assets linked to your organisation, including ones nobody listed.
Inventory
Keep them in one place, with owners and history.
Track change
Notice what appeared, changed, or disappeared.
Prioritise
Focus on the exposures most likely to matter.
Part 2
What the Al-Rasedah beta includes.
Authorised scope and ownership proof
You add the domains and address ranges you own. Domain ownership is proven with a DNS TXT record. Scans stay inside the scope you authorise.
Discovery
Subdomains, IP addresses, open ports and identified services, web endpoints and technologies, and TLS certificates.
One inventory per organisation
Every asset with first-seen and last-seen history. Classify unknown assets and assign owners.
Scheduled rescans and change detection
Rescans on the schedules you set. Each scan is compared with the last: new subdomains, opened ports, changed services, expiring certificates, and assets that disappeared.
Indicative vulnerability findings
Published advisories for known-exploited vulnerabilities are matched to the versions found, with a stated assessment such as “potentially affected”. These are indications from version matching, not proof of exploitability.
Prioritisation and reports
Risk ranking uses CISA's known-exploited list and EPSS exploit-likelihood scores. Reports: executive, technical, inventory, change, and vulnerability (HTML, PDF, CSV).
Scanning modes. Passive discovery sends no traffic to your hosts beyond DNS lookups. Active scanning runs only against scope you authorise, and intrusive vulnerability checks run only on domains whose ownership you have verified. Notifications are available by email and webhook.
In development: an Arabic interface. The product interface is currently in English.
Workflow
How Exteriq ASM works.
- Discover
- Inventory
- Detect changes
- Prioritise
Changes you can act on
Each change names the asset, what changed since the previous scan, and how serious it is likely to be. The first scan builds a baseline without alerting.
How the beta is deployed
Installed in your environment, by our team.
The beta is invite-only. Exteriq ASM runs on a server or virtual machine in your environment; there is no hosted version.
You provide
Your environment
- A Linux server or VM: about 4 vCPU and 8 GB RAM for one organisation with up to 5,000 assets
- Outbound internet access to reach your assets and download vulnerability data and detection updates
- The domains and ranges in scope, and DNS access to publish the ownership record
We provide
Al-Rasedah
- Installation on your server
- Configuration of scope, schedules, and notifications
- Handover and a walkthrough for your team
Where scanning comes from. Scans run from the server in your environment, so results show what is reachable from there. If you need an external vantage point, the scanning component can be placed on a separate host outside your network.
Exteriq ASM FAQ
Is Exteriq ASM part of Wazuh?
No. It is Al-Rasedah's own product, separate from Wazuh and from our Wazuh partnership.
Is it generally available?
Not yet. It is an invite-only beta, installed and configured by our team.
Does it monitor continuously?
It rescans on the schedules you set and compares each scan with the previous one.
What can it scan?
Only assets you own or are authorised to assess, added to its scope by you.
Beta scope, schedules, and support are agreed per installation. Findings support your own review; they do not guarantee that every exposure is found.
Interested in the Exteriq ASM beta?
Tell us about your domains and environment, and we will confirm whether the beta fits.