Public Relations

Asgent launches a free ASM Checkup analysis service that enables organizations to check their IT assets from the same perspective as a cyber-attacker.

January 16, 2024
Asgent, Inc.
(JASDAQ: 4288)

  Asgent, Inc. (Tokyo, Japan; President & CEO: Takahiro Sugimoto; "Asgent") today starts to provide an ASM Checkup free analysis service free-of-charge, which allows organizations to check the status of their IT assets from the same perspective as a cyber-attacker.

[Need for ASM]
   With the expansion of cloud use and the increase in remote working, an organization’s IT assets are increasing and so is starting point for cyber-attacks at the same time. Cyber-attack countermeasures require proper management of IT assets and identification of risks. However, it is not always easy to manage all IT assets, as the increased use of cloud computing means that there are some cloud uses that IT departments are unaware of, and the configuration is difficult to see.
   From this background, Attack Surface Management (ASM) has been attracting attention: ASM is a series of processes to discover IT assets accessible from outside the organization (the Internet) and to continuously detect and assess risks such as vulnerabilities that exist in these assets. In May 2023, the Ministry of Economy, Trade and Industry (METI) published “Guidance on the Introduction of ASM (Attack Surface Management)”, which introduces basic information on ASM, including its basic concepts, features and points to note, as well as examples of initiatives, so that organizations can incorporate ASM into their security strategies and utilize it appropriately. The guidance is intended to help organizations discover and manage their own IT assets using information that can be obtained externally. ^*１

[ASM Checkup Free Analysis Service]
   The ASM Checkup free analysis service collects information from various publicly available information, including an organization's domain name (OS, software version, open port numbers, etc.), and matches it with known vulnerabilities to identify risks from an attacker's perspective. In the initial stages of a cyber attack, attackers select attack targets and attack methods using publicly available information and information obtained from IT assets accessible via the Internet. By checking from the same perspective as the attacker, the defender can discover IT assets that the IT department is unaware of or that have different settings than expected (e.g., access to servers that should be inaccessible from the outside) and can recognize issues with IT assets before damage is caused.
   Organizations that use the ASM Checkup free analysis service will be provided with an analysis report ^*２ and a debriefing session. Detailed explanations will be provided at the session, enabling organizations to understand problems in their organization and take appropriate measures to address the risks, whether they have an information security officer or not.
   Asgent will contribute to improving the security of companies and organizations by providing various security solutions, including the ASM Checkup free analysis service.

ASM Checkup Free Analysis Service Application Site
   (This service is available only once per domain per organization.)

*1 Ministry of Economy, Trade and Industry "Guidance for Introduction of Attack Surface Management (ASM) - Discover and manage your organization's IT assets using externally available information. https://www.meti.go.jp/press/2023/05/20230529001/20230529001.html
*2 The report is based on IONIX tools.

*Company and product names are the trademarks or registered trademark of the respective companies.

*A translation system is used to translate our press releases into English. In the event of any inconsistencies between the original Japanese text and its translated version, the former shall prevail.