Bugcrowd External Attack Surface Management

What Bugcrowd External Attack Surface Management is

Bugcrowd External Attack Surface Management, also called Savant Vista, gives teams ongoing visibility into externally reachable assets associated with their domains and identifies and scores risks. It discovers subdomains, IP addresses, APIs and services through vertical and horizontal discovery. Automated exposure scans look for CVEs mapped to CVSS scoring, missing patches, misconfigurations, weak encryption, outdated protocols and default credential risks. Teams can set asset criticality, group assets by business unit or environment and assign them to Bugcrowd security programs. Scan findings flow into the Bugcrowd Security Inbox with vulnerability details and supporting evidence, where teams can prioritize exposures and follow remediation. Vista can link findings from Bugcrowd bug bounty, penetration testing and Vulnerability Disclosure Program services to affected assets. Teams can also submit high-risk assets to Bug Bounty, PTaaS, Red Team as a Service or VDP programs to validate exploitability. Monitoring is continuous, and the listed plan includes weekly vulnerability scans for 10 managed assets. The documented limits include five primary domains for vertical discovery and 250 domains from two-pass horizontal discovery; former Informer customers have higher limits. Vista covers publicly routable assets only, not internal or otherwise non-public assets. Pricing is on request.