Views:

Centrally manage the root domains, hosts, and IP addresses used as seeds to discover additional related internet-facing assets and gain visibility into your external attack surface.

In Attack Surface Discovery, a seed is a known root domain, host, or IP address from your organization that initiates the discovery of internet-facing assets. By managing seeds, you control which external-facing assets are tracked and assessed.
Seed Management provides a centralized location to add, view, and remove active seeds. You can clearly identify assets used as seeds and remove any seeds you want to stop discovery from without affecting unrelated assets.
When you add a seed asset, the asset appears in Seed Management and is identified by the seed icon (EASM_Seed=252f7a28-721f-4f4c-b2f3-237e39454d64.jpg) in Attack Surface DiscoveryInternet-facing assets. Discovery of additional assets based on newly added seeds may take up to seven days.
When you remove a seed asset, new assets related to the seed are no longer discovered. Any assets previously discovered using the seed are also removed after the next update.
You can add seeds by clicking Add from the Domain or Public IP list, which takes you to Seed Management. You can remove seeds in Seed Management or directly in the asset lists by selecting one or more seed assets and clicking Remove seeds.
The following table details the actions you can perform in Seed Management.

Seed Management actions

Action
Details
Add seeds
Click Add seeds and select whether to add domains or IP addresses.
For domains:
  • Specify one domain or host that belongs to your organization.
  • To add another domain or host, click Add more and specify another domain or host up to a maximum of 20.
  • To add more than 20 domains or hosts at a time, contact your support provider.
For IP addresses:
  • Specify up to 5,000 IPv4 or IPv6 addresses that belong to your organization. Supported formats and methods:
    • Individual IPv4 addresses
    • IPv6 addresses in any valid format
    • Comma-separated IP address lists
    • IPv4 address ranges separated by hyphens (-)
Discovery of assets related to added seeds may take up to seven days.
View seeds
Click Seed Management from Attack Surface DiscoveryInternet-facing assets to view all active seeds along with the user who added the seeds and when the seeds were added.
Remove seeds
Remove seeds by selecting one or more seeds in Seed Management or from the internet-facing asset lists and clicking Remove seeds.
When you detete a seed:
  • Asset discovery from the seed stops
  • Assets discovered only by the related seed are removed in the next update
  • Assets discovered by the related seed and other active seeds remain as long as the other seeds are active