Almost all organizations have some form of internet presence. External assessments take the approach of assessing externally facing infrastructure, including webservers, fileservers, domains and any related Internet facing hosts. This assessment is geared towards demonstrating how Internet facing infrastructure could be compromised, while mapping the external attack surface.

The SensePost team uses both proprietary and open source toolsets to produce accurate footprint data. Footprinting is either performed on a specific list of external IP ranges or an exercise termed “an extended footprint” whereby IP ranges are also discovered amongst other. The extended footprint can also be leveraged to determine rogue marketing sites, or unattended development environments which pose great business risk.