Hexiosec ASM implements various bespoke methods in the enumeration of attack surfaces and identification of risks.

Hexiosec ASM uses some external data sources for data. 

The sources we use are updated frequently but when an issue is fixed, the associated data source may not have updated since the fix was put in place.  When this happens, the scan will temporarily report that the issue still needs to be addressed, this will resolve when the data source is updated.  We use a range of data sources to improve the accuracy of our reporting. 

I don't think this vulnerability applies to me?

Why has my scan not updated after I've made a fix?

Why is my IP's geographic location not showing, or incorrect?

Hexiosec ASM

Hexiosec ASM (Public)

Organisation and Group Roles

Using Groups

MFA and session expiry

Password Policy

Changing email address

Changing ownership

User and Group Management

Scan Types

Scan Allowances

Seeds and IPs

Scan Limiting

Deleting Scans

Scan Notifications

Managing Scans

Report Terminology

Scan Reports

Health Scores

Managing Actions

TLS Certificate Risks

Backport Resolvable Risks

Risk Severity Ratings

SPF Hard Fail risks

Managing Risks

Managing Domains

Graph view

Managing CDNs and Shared IPs

Creating a scan using the API

Paginating the API Requests

Using the Public API

Hexiosec ASM mobile

Upgrade Recommendations

Contacting Support

User Guides

I've changed the device I use for MFA

I've accepted an invite, why can't I see anything?

Will Hexiosec ASM find Malware?

What is out of scope?

What is a Stale domain?

Can I run scans without permission?

What happens when I delete a scan?

Will the latest CVE be found?

What version is Hexiosec ASM?

Which SSO protocols does ASM support?

FAQs

MSP Specific Guidance