Welcome to the Hexiosec ASM documentation. Here you’ll find step-by-step guides to help you:

If you’d like to see a guide we haven’t covered yet, drop us a line at support@hexiosec.com.

Hexiosec ASM User Guides

EPSS

Organisation and Group Roles

Using Groups

MFA and session expiry

Password Policy

Changing email address

Changing ownership

User and Group Management

Hexiosec ASM

Hexiosec ASM (Public)

Scan Types

Scan Allowances

Seeds and IPs

Scan Limiting

Deleting Scans

Scan Notifications

Managing Scans

Report Terminology

Scan Reports

Health Scores

Managing Actions

EPSS Scoring of Risks

TLS Certificate Risks

Backport Resolvable Risks

Risk Severity Ratings

SPF Hard Fail risks

Managing Risks

Managing Domains and IPs

Graph view

Managing CDNs and Shared IPs

Cloud Asset Discovery

Link Changes Endpoint

Creating a scan using the API

Paginating the API Requests

Managing API Keys

Using the Public API

Hexiosec ASM mobile

Upgrade Recommendations

Contacting Support

What is the 'Update pending' notification?

I've accepted an invite, why can't I see anything?

What version is Hexiosec ASM?

Which SSO protocols does ASM support?

Which domains need security.txt files?

Why is my IP's geographic location not showing, or incorrect?

What are primary and secondary assets?

What is a Stale domain?

Does ASM validate the DKIM public key?

Why do I have a risk against client-side React?

I don't think this vulnerability applies to me?

I've fixed a risk, why has it not been resolved?

Will Hexiosec ASM find Malware?

Can I run scans without permission?

Why are secondary assets included in my IP/domain count?

Frequently Asked Questions

MSP Specific Guidance