ghostspy
All tools
Coming Soon Attack Surface Management v0.1.0

Exposr

Know what you're exposing to the internet — continuously.

External Attack Surface Management platform for discovering, monitoring and prioritising internet-exposed assets.

GitHub Docs

Overview

Exposr treats your external attack surface as a live stream rather than a one-off snapshot. It continuously discovers internet-facing assets, watches them for change, and surfaces what actually matters — so exposures are caught in hours, not at the next quarterly scan.

Why Exposr

Most attack surface tooling produces a report that’s stale the moment it finishes. Cloud resources spin up, DNS records change, and new services appear between scans. Exposr is built around the diff: it tells you what changed, scores the risk, and gets out of your way.

How it works

  1. Seed — start from your domains, ASNs and known ranges.
  2. Discover — passive and active discovery expand the asset inventory.
  3. Monitor — each run is compared against the last to detect change.
  4. Prioritise — new and changed assets are scored so triage starts with the riskiest exposure first.

Exposr is in active development. This page will evolve as the project moves through private and public beta. Follow along for release updates.

Features

  • Continuous asset discovery
  • Change detection and alerting
  • Exposure scoring and prioritisation
  • Historical attack surface timeline
  • Slack, webhook and email notifications
  • API-first architecture

Architecture

Exposr is API-first: a Go collector runs discovery jobs (subdomain enumeration, DNS resolution, port and service probing) on a schedule, writes results to a Postgres store, and diffs each run against the last. A worker computes exposure scores from the diff; a thin web UI and REST API read from the same store. Everything is designed to run as stateless workers behind a queue so discovery scales horizontally.

Installation

quick start 
# not released yet — this is where the quick-start will go
exposr auth login
exposr scope add yourdomain.com
exposr scan --watch