Meet Constantine – Find Mythos-level vulnerabilities in your code. It proves them, patches them, PRs them back. Autonomously.

Download Datasheet
Praetorian Guard / Attack Surface Management

Attack Surface Management

Start with a domain. See what an adversary would find.

No integration required to begin. Guard works outward from a single domain the way an operator opens an engagement: WHOIS records, EDGAR filings, acquisitions, favicon hashes, certificate transparency. Connect your cloud accounts and systems of record, and Guard reconciles that outside-in picture against your inventory, then shows you the gap between them.

The gap is usually where the risk lives: a domain that came with an acquisition and never made it into the CMDB, a cloud account nobody remembered. And it moves. An ephemeral Lambda appears, gets scanned, and is queued for testing before a quarterly scan would have seen it at all.

Start with one domain
See the Guard platform
GUARD · ASSET INVENTORY

What is attack surface management?

Attack surface management (ASM) is the continuous discovery, inventory, and monitoring of the internet-facing assets an organization owns, including the ones it has lost track of, so exposures can be found and fixed before an attacker finds them.
Praetorian Guard starts from a single domain, discovers assets the way an operator would, reconciles them against your cloud accounts and systems of record, and queues new assets for testing as they appear.
Every surface, one operation
Internet perimeter
Web applications and APIs
LLM interfaces
Cloud
Code, CI/CD and secrets
Internal networks and AD
Social engineering
Seed-to-environment discovery
Ownership reconciliation
Route 53 · Cloudflare · GitHub
ASM vs. point products

Point products are inputs. Guard is the outcome.

Every category below is something an operator needs on the way to an answer. None of them is the answer. Guard runs them as modules, or ingests the ones you already own, and uses them to find where you actually get compromised.
The line item
What it gives you today
What Guard does with it
Attack surface management
An inventory, usually stale
Guard discovers what you own from a single domain, reconciles it against your systems of record, and attacks it.
USE OURS
Guard ships every one of these capabilities itself. Consolidate the stack and cancel what it makes redundant.
OR BRING YOUR OWN
Keep the tools you have renewed and plug them in through over 80 integrations. Guard does not care where an input comes from, only whether it survives proof.
Operator-validated ASM

Agents run the operation. Operators own the result.

Praetorian has been running offensive engagements for over a decade. Guard is that tradecraft written into code, and the same operators still review what comes out of it. An exploited finding gets operator review before it reaches you. When something needs a signature for a board, an auditor, or a customer security review, a Praetorian operator signs it.
Guard interrogates the environment for what actually is, mapped to NIST CSF and FDA today, with ISO 27001 and PCI coming.
OPERATOR REVIEW
Exploited findings are reviewed by the people who wrote the tradecraft
NAMED ATTESTATION
A human signs what your auditor and your board receive
ANNUAL ASSESSMENT INCLUDED
Human-led, on your dates, inside the same subscription
Related Guard capabilities

The rest of the platform

Vulnerability Management

A finding is a claim until something exploits it.

Explore vulnerability management →
Continuous Penetration Testing

A target and an objective. Everything else is a dial.

Explore continuous pen testing →
Breach and Attack Simulation

Did anything catch it?

Explore breach and attack simulation →
Threat Intelligence

A CVE drops. Guard already knows if it touches you.

Explore threat intelligence →
Continuous Threat Exposure Management

Exposure management that proves what is exploitable.

Explore CTEM →
FAQ

Attack surface management questions

Attack surface management (ASM) is the continuous discovery, inventory, and monitoring of the internet-facing assets an organization owns, including the ones it has lost track of, so exposures can be found and fixed before an attacker finds them.

No. Guard can start from a single domain with no integration work. Connecting cloud accounts and systems of record lets it reconcile the outside-in view against your inventory.

Guard works outward from a domain using sources such as WHOIS records, EDGAR filings, acquisitions, favicon hashes, and certificate transparency.

The internet perimeter, web applications and APIs, LLM interfaces, cloud, code, CI/CD and secrets, internal networks and Active Directory, and social engineering.

Discovery is continuous. A new asset, such as an ephemeral Lambda function, is discovered, scanned, and queued for testing as it appears rather than at the next quarterly scan.

Start on Guard Free with a single domain and no integration work, or request a month-long free pilot run against your own environment.

Pilots and free access

If the point of your program is to keep people like us out, get our perspective on it.

Month-long free pilots, funded with AI tokens, run against your own environment. See what a fleet of offensive agents finds before someone less friendly does. Or start on Guard Free with a single domain and no integration work.
Start with one domain
Start a pilot
Or watch the 42-minute walkthrough
Get started

Get started with Guard

Watch Guard work a real attack surface end to end: discovery, validation, and exploitation, with the operators who run it. Then point it at one of your own domains for free.