GOasa: Attack Surface Analysis
Uncover hidden cyber security risks
GOasa, GObugfree's attack surface analysis, shows you which systems and services are unintentionally exposed - and how you can protect them.
Let’s tackle your security risks together!

More security through insights into your systems
GOasa ensures your company is prepared — even against threats you didn’t know existed.
Comprehensive visibility
Identify systems that are externally accessible, from development environments to forgotten subdomains.
Detect shadow IT
Detect and secure hidden systems such as old servers or unsecured databases that could reveal sensitive data.
Quick & easy set-up
Fast, guided process with results in just a few days.
Efficient patch management
Prioritise and install patches for known vulnerabilities to protect your systems.
Increased security
Prevent data leaks by fixing outdated software and misconfigurations before they can be exploited.
Customised measures
Report with clear recommendations from our experts, specifically for your company. Consultancy on request.
Uncover risks and secure your systems
With GOasa, GObugfree's Attack Surface Analysis, you gain comprehensive insights into your public IT architecture and clear, actionable recommendations for risk mitigation. Identify and secure your exposed systems in just a few steps.
Step 1:
Scan infrastructure- Identify exposed domains, subdomains, IP ranges, and ports.
- Detect vulnerabilities, misconfigurations, and outdated software—whether intentionally or unintentionally exposed online.
- Everything is automated and requires no technical effort on your end.
Step 2:
Receive a detailed report- Receive a clear and structured overview of your attack surface:
- Vulnerabilities and outdated software
- CVE-Checks (Common Vulnerabilities and Exposures) – even for software without known security flaws.
- Actionable recommendations to mitigate risks.
- Receive a clear and structured overview of your attack surface:
Step 3:
Take action!- Share the results with your IT service provider or internal team to close security gaps.
- Our security experts are available for personal consultations and follow-up discussions, if needed.
Key elements of the GOasa report
EXECUTIVE SUMMARY
Overview by severity
Quickly understand the total number and severity of vulnerabilities. This overview highlights where immediate action is needed, helping you allocate resources efficiently.
EXPOSED AREAS
Overview of exposed subdomains and services
Publicly accessible services like subdomains or FTP servers are uncovered. These systems should be removed, secured, or reviewed to minimize security risks.
CLEAR RECOMMENDATIONS
Detailed actionable steps for risk mitigation
Our specific recommendations help your team close security gaps quickly and sustainably:
- Prioritized CVEs for rapid implementation.
- Measures tailored to your infrastructure.
Frequently asked questions about Attack Surface Analyses:
If something is not covered or you have any questions, please email us at [email protected].
Is your SME prepared for the risks you can't see?
Development environments, forgotten subdomains, and misconfigurations often go unnoticed. GOasa helps you identify hidden risks, understand them, and consistently secure your systems—before attackers do.