Facilities and units inventory
Starting from the root domain, CSURFACE maps the external presence of all facilities, branches, and related units — including what the official inventory does not record.
INDUSTRY AND MANUFACTURING
External exposure under control in the industry.
The industry has connected plants, systems, and suppliers to corporate networks and the cloud — and thereby expanded the external attack surface. CSURFACE discovers and continuously monitors this exposure from an attacker's perspective without touching the operational environment.
THE CONTEXT
When the factory connects, the attack surface grows
The digitalization of manufacturing brought real gains in efficiency and, along with them, new points of exposure. Factories, production management systems (MES and ERP), corporate infrastructure, and a wide chain of suppliers and integrators began to communicate over the network. The line between information technology and the factory floor became blurred, and each interface between the two is an entry point in the external attack surface. Standards like ISO 27001 and IEC 62443 guide governance of this convergence.
Blind spots are frequent in manufacturing: management interfaces accessible over the internet without being noticed, environments of units and branches outside central inventory, inherited infrastructure from acquisitions, and dependence on suppliers and integrators with access to their environments. In this scenario, projects, production processes, and intellectual property are exposed at a distance. The attacker enumerates all of this, and the security team must see the same — without interfering in operations.
HOW CSURFACE HELPS
Visibility applied to industrial reality
The platform discovers, categorizes, and prioritizes external exposure — with the context an industrial operation needs to act.
Exposed management interfaces
Web panels and management systems accessible via the internet are identified and continuously monitored — the exposure that often goes unnoticed.
Prioritization by productive continuity
The order considers observed exploitation and the impact of the asset on operational continuity — interfaces that border the factory floor before others.
Suppliers and integrators in the inventory
Assets of suppliers and integrators with digital presence linked to their operations are included in the same inventory, with an auditable trail for each finding — objective support for ISO 27001 and IEC 62443-driven governance and protection of factory intellectual property.
| Asset | Type | Exposure |
|---|---|---|
| portal-fornecedor.exemplo.com.br | Supplier portal | high |
| mes-hml.exemplo.comhomologation | Exposed MES / ERP | critical |
| vpn-planta.exemplo.com.br | Factory remote access | critical |
| api-integrador.exemplo.com | Third-party integrator | high |
The surface exposed by the convergence of IT/OT and integrator chains — mapped from outside without interfering with operations.
FREQUENTLY ASKED QUESTIONS
FAQ
Does CSURFACE interact with industrial control systems?
No. The discovery is entirely external and does not touch plant equipment or control systems. The scope covers the externally exposed attack surface without any risk to operations.
Does the platform identify exposed management interfaces?
Yes. Internet-accessible panels and management systems are mapped as part of the external attack surface and continuously monitored.
Does the platform cover suppliers and integrators?
Yes. Digital assets of suppliers and integrators related to their operations are incorporated into the same inventory, with each asset's ownership validated before reaching the dashboard. This also includes plants, branches, and related units, including inherited infrastructure from acquisitions that were outside the official inventory.
See what is exposed in your attack surface.
Enter the domain of your operation and receive a preliminary analysis of your external exposure. No card, no meeting.
Receive preliminary analysis