What is Asset Discovery?

Asset Discovery is a service whereby AppCheck discovers assets related to, but not included in, your existing account scope.

Discovered assets can be reviewed in:

• Assets
  • Asset Discovery

This feature helps raise awareness of assets across the teams responsible for your organisation’s security posture. For example, an outsourced marketing campaign might create a new subdomain without the infosec team’s knowledge. If left unmanaged, this subdomain may not comply with your organisation’s security practices.

How Does AppCheck Discover Assets?

Asset Discovery uses Open Source Intelligence (OSINT)—the gathering of publicly available information such as DNS records, TLS certificate details, HTTP headers, and more.  By analysing this data for links to your existing assets, related assets can be identified.

What Can I Do With Discovered Assets?

Raising awareness of these assets can help ensure they are maintained in line with your security policies. 

Within AppCheck, you can also choose to add discovered assets to your account scope for inclusion in future scans.

Asset Discovery helps you find (and secure) the assets you didn’t know you had—before someone else does.

Can I Hide a Discovered Asset I'm Not Interested In?

Yes – Asset Discovery allows users to suppress discovered assets that you do not need to include in your scanning scope. To do this, select any assets you want to suppress using the checkbox next to each asset, and then press the "Suppress" button in the top right of the view. The assets you selected will move from the Discovered Assets view to the Suppressed Assets view. To review all the assets you've suppressed, click on "Suppressed Assets" under "Asset Discovery" in the left-hand menu.