HackerView FAQs

HackerView is CTM360's External Attack Surface Management (EASM) platform. It continuously finds, verifies and monitors everything your organization has exposed on the internet, builds a Digital Asset Register, and flags security issues across domains, subdomains, IP addresses, technologies and applications.

External Attack Surface Management (EASM) is the process of continuously identifying, monitoring, and securing an organization's externally facing or publicly accessible assets. This process enables organizations to address weaknesses, misconfigurations, and potential entry points that adversaries could exploit to gain unauthorized access or cause harm.

It starts with what's known about your organization and follows the trail through registration records, SSL certificates, DNS and hosting data. Each asset it finds, whether a domain, subdomain, IP address or web app, is checked against ownership evidence before it's added.

A Digital Asset Register is a live inventory of everything that represents your organization online: domains, subdomains, IP addresses, certificates, cloud and SaaS assets, social accounts, mobile apps, shadow IT and shadow AI. It is important because organizations cannot protect assets they are unaware of, and attackers often target unknown or overlooked assets to exploit security weaknesses.

HackerView flags problems an attacker could spot from the internet, such as an outdated web server, an expired SSL certificate, an open database port, or a missing SPF record. Each finding is linked to the affected asset, so it's clear what needs fixing.

HackerView reduces false positives by identifying and verifying digital assets linked to your organization's primary domain through ownership checks. Before an asset joins your register, HackerView looks for proof it belongs to you, like registration records, certificates or hosting details. A website that simply mentions your brand name won't be counted as yours.

The rating reflects your overall external security posture. It weighs security issues, vulnerabilities, domain and email misconfigurations, exposure levels and website security, giving more weight to problems on important assets. As you fix issues, the score goes up.

HackerView continuously monitors your external attack surface, with its Digital Asset Register automatically updated near real-time to 48 hours to reflect newly discovered assets and changes to existing ones, without requiring manual scans.

Yes, in a passive and non-intrusive way. HackerView spots externally visible vulnerabilities without disrupting your systems. For deeper checks, DeepScan runs technology-specific tests that confirm an issue and show how severe it really is. Examples include Exposure-based checks prioritized using CVSS and EPSS scores, Critical and high-risk CVE vulnerability checks, etc.

HackerView supports remediation teams by identifying and prioritizing vulnerabilities, misconfigurations, exposures, and IT hygiene issues based on severity. It provides detailed findings, supporting evidence, and recommended remediation steps. Teams can also track progress, rescan issues, and monitor improvements in their organization's cyber risk score. The platform also provides Remediation Planning to streamline the issue remediation process.

Technology Discovery lists the software visible from the internet across your infrastructure: web servers, frameworks, databases, cloud services and more. It matters because attackers check your tech stack first and then look up its known flaws. Knowing your stack lets you patch before they do.

Yes. HackerView shows which services are reachable from the internet, such as remote desktop, databases or admin panels, so you can close anything that shouldn't be public.