# Exposure analysis for your real attack surface

Neo continuously discovers your domains, APIs, and endpoints, tracking exposure changes in real time. A living inventory with risk classification and actionable evidence.

## How Neo analyzes exposure

From continuous discovery to evidence-backed remediation. Neo gives you a living map of what's exposed, prioritizes by risk, and routes findings with the context teams need to act.

### 01. Discover

#### Continuous Asset & Endpoint Discovery

Neo continuously discovers your external-facing application surface including domains, subdomains, services, and endpoints, then normalizes and deduplicates results into a usable inventory.

- Domain & subdomain enumeration
- Endpoint catalog with timestamps
- Diff tracking over time
- Net-new exposure alerts

### 02. Classify

#### Exposure Context & Risk Classification

Neo turns raw inventory into prioritization by classifying exposure with context: authentication state, sensitive-data likelihood, critical paths, and change risk.

- Auth state detection (public/privileged)
- Sensitive data indicators
- Critical path identification
- Prioritized risk scoring

### 03. Remediate

#### Evidence + Ownership for Fast Closure

Neo produces evidence-grade artifacts and routes exposure issues to the right owner with the right context. Teams get reproducible proof and a clean handoff.

- Evidence packs (requests, responses)
- Owner routing suggestions
- Ticket creation (Jira/Linear)
- Retest & verification records

## Continuous exposure, from discovery to closure

Neo treats exposure analysis as a continuous control, not a periodic exercise. It produces evidence leadership can trust and findings engineers can act on.

### Input

#### Seed Scope Definition

Define your scope with domains, repos, environments, and allow/deny lists. Neo uses operator-grade discovery tools to enumerate your attack surface.

### Discover

#### Asset Enumeration

Continuously discover subdomains, services, and endpoints. Neo normalizes and deduplicates results into a usable inventory with stable identifiers.

### Classify

#### Risk Classification

Neo classifies exposure with context: authentication state, sensitive-data likelihood, and change risk to help teams prioritize what matters.

### Route

#### Evidence + Workflow Routing

Neo produces evidence-grade artifacts (what was found, where, when, and how) and routes exposure issues to the right owner. Teams get reproducible proof and a clean handoff.

### Track

#### Living Inventory

Exposure diff reports track what's new, what changed, and what disappeared. Retest records prove closure over time.

## Complete visibility. Zero blind spots.

Neo gives you complete visibility into your external attack surface.

### Know what you're exposing

Most teams don't have a single trusted inventory of APIs, endpoints, and subdomains. Neo gives you a living map of what's actually exposed to the internet.

### Catch shadow and zombie APIs

Shadow and zombie APIs emerge from migrations, previews, and partner integrations. Neo detects exposure changes faster than documentation updates.

### Prioritize what matters

Security can't prioritize what it can't see. Neo classifies auth gaps, sensitive-data exposure, and externally reachable endpoints with continuous drift tracking.

### Evidence that drives action

Without evidence and ownership, exposure findings stall. Neo routes issues with proof so teams stop arguing about impact and start fixing.