FIELD REPORTS
Field reports: attack surface management analysis
THE SHORT ANSWER
Dated analysis from The Perimeter Desk on what moves an exposure from discovery to a fix: new testing approaches, who controls mitigations, how to question a demo and how to read vendor claims. Every post states its publication date and the dates of the sources it uses.
- AI pentesting arrives in attack surface management: what changed in 2026
Proof
Four vendors, four kinds of AI testing, one question: does it prove more?
- Who owns the WAF rule when an ASM tool pushes a mitigation?
Containment
Approval, expiry and removal for machine-made mitigations.
- Ten questions to ask in an ASM demo about proof and fixes
Buying
Move the demo past the asset count.
- Microsoft Defender EASM in 2026: status, limits and who it suits
Platforms
What the documentation says, and what it leaves to you.
- Platform suite or specialist ASM tool? The trade-off, step by step
PlatformsBuying
Stack fit against proof and containment.
- How we built the closure track: stations, statuses and the hard calls
Method
The evidence behind 60 station calls.
- Attack surface management on day one of an acquisition
ProofBuying
The inherited estate, the owner problem and a 90-day plan.
- 15 minutes, 22 minutes, 12 hours: how to read ASM vendor speed claims
ProofMethod
Three figures, three different clocks.