Frequently Asked Questions.

Traditional vulnerability scanners actively bombard servers with thousands of fuzzing strings and injection attacks, frequently causing server errors and WAF bans. AttackSurface is a continuous security-change intelligence engine. We monitor non-intrusive public perimeter signals (Certificate Transparency logs, DNS changes, HTTP headers) and compute temporal differentials (T0 vs T1) to catch vulnerabilities the moment an infrastructure change occurs.

No. We enforce a strict Zero-Weaponization standard. We never send malicious payloads (SQLi, XSS, SSRF, buffer overflows), attempt privilege escalation, or access internal data. All telemetry is obtained via standard, benign DNS queries and read-only HTTP GET/HEAD requests respecting rate limits and robots.txt policies.