Novee 的 External Surface Testing 檢查哪些暴露資產可被攻擊者實際利用

Novee’s External Surface Testing checks which exposed assets attackers can actually exploit

Artificial intelligence penetration testing startup Novee Cyber Security Ltd. today added External Surface Testing to its platform so its AI-driven attacks can reach a customer’s entire internet-facing footprint.

External Surface Testing is aimed at the scramble after a critical vulnerability is disclosed, when security teams have to work out which exposed assets are affected and whether any can actually be exploited. Novee argues that attackers see a target as a single environment with many ways in, including forgotten subdomains and staging servers someone left exposed.

Conventional external attack surface management products catalog a company’s exposed assets and score them by severity. Netta Rager Dan, vice president of product at Novee, said those products “show you what’s exposed, but don’t give you the full picture of real risk.” In the company’s telling, security staff are left to validate long lists of exposures on their own.

Novee’s version needs nothing more than a domain name to get started. From there the software works outward the way an outside attacker would, and it keeps track of what it learns about each asset and service as it goes. A newly disclosed vulnerability gets run against a customer’s live systems to see whether anyone could actually exploit it.

Findings exported from other vendors’ attack surface tools go through the same check. Novee says the testing also catches flaws nobody had logged, chained attack paths among them, and the customer ends up with a short, prioritized list of validated issues backed by evidence.

Until now Novee’s testing has stopped at the application layer. External Surface Testing runs on the same platform as the company’s Application Pentesting product, so a host found during external discovery can be promoted straight into a full gray-box or white-box pentest. Whatever the discovery phase learned carries over. Novee claims no other fully autonomous AI pentesting platform covers the external attack surface as well as web, mobile and AI applications.

Limits are built in to keep the testing safe. Customers approve the scope before anything runs, and the probes come from outside the perimeter without agents or customer-supplied credentials. Exploit attempts don’t use destructive payloads. Traffic is held under configured caps so testing doesn’t cause load spikes or bury the security operations center in noise.

Former national-level offensive security operators Ido Geffen, Gon Chalamish and Omer Ninburg founded Novee in May 2025. YL Ventures LP, Canaan Partners and Zeev Ventures LP backed the company when it launched in January with $51.5 million in funding.

External Surface Testing is available now as part of the Novee platform.

Image: Novee

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

• 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
• 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network

SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.