The Hexiosec ASM Cloud Connector automatically discovers internet-facing assets across AWS, Azure, and GCP.  It enables seamless integration between your cloud environment and Hexiosec Attack Surface Management (ASM). It securely enumerates your cloud infrastructure, identifies external-facing resources — such as domains and IP addresses — and adds them as seeds to your ASM scan. This enhances asset visibility for ASM scans, ensuring comprehensive coverage of your cloud footprint is included in the scan.

Managing CDNs and Shared IPs

Cloud Asset Discovery

EPSS

Link Changes Endpoint

Creating a scan using the API

Paginating the API Requests

Managing API Keys

Using the Public API

Hexiosec ASM

Hexiosec ASM (Public)

Organisation and Group Roles

Using Scan Groups

MFA and session expiry

Password Policy

Changing email address

Changing ownership

User and Group Management

Scan Types

Scan Allowances

Seeds and IPs

Scan Limiting

Deleting Scans

Scan Notifications

Managing Scans

Report Terminology

Scan Reports

Health Scores

Managing Actions

EPSS Scoring of Risks

TLS Certificate Risks

Backport Resolvable Risks

Risk Severity Ratings

SPF Hard Fail risks

Managing Risks

Managing Domains and IPs

Graph view

Hexiosec ASM mobile

Upgrade Recommendations

Contacting Support

Hexiosec ASM User Guides

How do I amend my marketing preferences?

How long do we keep the scan changes data?

What is the 'Update pending' notification?

I've accepted an invite, why can't I see anything?

What version is Hexiosec ASM?

Which SSO protocols does ASM support?

Which domains need security.txt files?

Why is my IP's geographic location not showing, or incorrect?

What are primary and secondary assets?

What is a Stale domain?

Does ASM validate the DKIM public key?

Why do I have a risk against client-side React?

I don't think this vulnerability applies to me?

I've fixed a risk, why has it not been resolved?

Will Hexiosec ASM find Malware?

Will the latest CVE be found?

Can I run scans without permission?

Why are secondary assets included in my IP/domain count?

Frequently Asked Questions

MSP Specific Guidance