Novee Launches External Surface Testing for Approved Systems

Novee launched External Surface Testing Tuesday, Nov. 3, giving security teams a way to map internet-facing assets and test customer-approved systems from outside their network perimeter.

Teams can enter a company name or domain, bring in results from external attack surface management tools, or select a recently disclosed vulnerability and specify approved assets for testing. Novee says the checks require no customer credentials, installed agents or added software. The company says tests use non-destructive methods and configured traffic limits.

A host found during discovery can move into an application penetration test, carrying its findings and discovery context into that next step. The feature is available now.

“When a critical new CVE is disclosed, security teams need answers fast – which assets are affected, what’s actually exploitable, and where to focus first,” said Netta Rager Dan, Novee’s vice president of product.

Novee launched Exploitability Validation on Sept. 16 to test findings from external security reports.