Exposure assessment
Exposure assessment, outside in and inside out
An exposure assessment answers two questions together: what of your organisation can be reached from the internet, and what is actually connected inside the network. Growth Hub's reseller partners run it with Censys for the outside-in view and runZero for inside discovery, and use Zero Networks to contain what cannot be fixed quickly.
Why both views
Neither view is complete on its own
An internal inventory misses what is exposed through subsidiaries, suppliers and forgotten cloud services. An external view cannot see the unmanaged devices behind the firewall. Together they show what exists, what is reachable, and which assets matter most.
It suits:
- A first baseline before a security programme or budget cycle
- New leadership who need to know what they have inherited
- Preparation for an audit or regulatory review
- The period after an acquisition or restructuring
- The start of a segmentation or zero-trust project
Method
How an assessment runs
-
Outside-in view
Censys shows what of the organisation is reachable from the internet, including supplier-facing systems. More on Censys
-
Inside discovery
runZero establishes what is connected inside the network, managed and unmanaged. More on runZero
-
Findings to the partner
The reseller partner presents the findings and scopes the remediation: closing exposure, patching, decommissioning.
-
Contain what cannot be fixed quickly
Zero Networks limits what can move, including where accounts can log in. More on Zero Networks
The reseller partner leads the assessment. Growth Hub and the vendors provide the technical support behind each step.
Outcome
What the assessment produces
- An inventory of what is connected, including the assets nobody had listed
- A view of what is reachable from the internet, and what was never meant to be
- Findings prioritised by where each asset sits and what it does
- A remediation scope from the reseller partner
- Where it applies, a containment plan for what cannot be fixed quickly
Who does what
Your partner leads. We and the vendors support.
-
Your reseller partner
Leads the assessment, presents the findings, and scopes and delivers the remediation work.
-
Growth Hub
Distributes the three platforms across Africa, provides technical validation and deployment support during the assessment, and enables the reseller partner.
-
Censys, runZero and Zero Networks
Provide the platforms and vendor technical support.
Growth Hub holds all relevant sales and technical certifications and meets the distributor requirements of runZero, Censys and Zero Networks.
Our distribution rights cover Africa. Our active markets are South Africa, Nigeria, Kenya, Morocco and Egypt. See current engagements.
Getting started
How to begin
Tell us where you operate and what you want to understand. We will connect you with a reseller partner in your market to scope and run the assessment. If you already work with a reseller, tell us who, and we will work through them.
What to include
- The country or countries you operate in
- Your organisation and sector
- Roughly how many sites and networks are involved
- The domains, brands or entities that should be in scope
- Any part of the environment to leave out, such as OT, for now
- What prompted the question
- Your reseller, if you already have one
Related
The technology behind each step
Each step uses a platform Growth Hub distributes across Africa.
- External attack surface management, with Censys: what of the estate is reachable from the internet.
- Asset discovery and visibility, with runZero: what is connected inside the network, managed and unmanaged.
- Microsegmentation and containment, with Zero Networks: limiting what can move once an attacker is inside.
- Current engagements: where we are working, by problem, organisation type and stage.