Attack Surface Monitoring is the continuous observation of external assets, domains, certificates, and infrastructure changes that may signal abuse or exposure.

It is how organizations catch newly registered lookalike domains, DNS shifts, and active phishing infrastructure before those threats escalate.