What attackers see when they look at your name
Every domain your organisation holds is a door. Over the years, campaigns end, agencies leave, subsidiaries change providers, and some of those doors stay open with nobody looking after them. Attack surface monitoring keeps the list of these doors up to date and tells you which ones need attention.
What is monitored
- Domains: their expiry dates, their holders, their name servers and their registry locks.
- DNS: name servers changed without an order, and names whose DNS point nowhere.
Why it matters
Many incidents start with something forgotten: a domain that expired and was registered again by someone else, or name servers changed without anyone noticing. These are cheap to fix when they are found early, and costly when they are found by an attacker or by your customers.
How Domgate handles it
We start from your domain portfolio, at every registrar and in every subsidiary: holder, expiry date, contacts and name servers. The inventory is then watched continuously. Each finding comes with a recommended action and its priority: renew, consolidate, register, drop or recover.
What you provide
- The list of your domains, or the registrars and accounts where they are held.
- A contact in your IT or security team who receives the findings.
Who it is for
Groups with many domains and subsidiaries, companies after a merger or a change of name, and security teams who want the domain and DNS layer covered by the same review as the rest of their infrastructure.
Attack surface monitoring: frequent questions
How is this different from a domain watch?
A domain watch looks at names registered by others that contain your brand, and also flags changes to the domains you already hold. Attack surface monitoring starts from your own names and what may have been forgotten among them. The two complement each other.
Can you fix what you find?
On the domains and DNS we manage for you, yes, with your approval. For the others, the report says what to change and where, so that your team or your provider can do it.
