Security - Concept
Attack surface
All the places where someone could potentially attack or gain access to a system
What's it for?
Helps security teams see and reduce the different ways someone could get into or damage a system.
For example…
Decommissioning old VPN portals and unused SaaS apps reduces the company’s internet-facing attack surface
Removing an unused public admin page and closing an old VPN service reduces the company's attack surface
Think of it like…
Counting every door, window, and cellar hatch on a building before deciding where to put locks