EASM (External attack surface management) is a process, technology and service designed to discover user Internet-facing assets, systems and associated vulnerabilities. EASM can help identify unknown assets and provide information about cloud services, systems and applications. This information is visible and available in the public domain, and attackers may use it to conduct attacks on systems.