# External Attack Surface Management (EASM)

External Attack Surface Management: your monitored assets (domains, subdomains, IPs, websites), what Deepinfo discovers around them, and the issues…

Source: https://docs.deepinfo.com/reference/easm/

Last updated: 2026-09-27

---
Your monitored **assets** (domains, subdomains, IPs, websites), what Deepinfo **discovers** around them, and the **issues**, **vulnerabilities** and **technologies** found on them.

## Assets

Add, search, update, tag and delete the assets you monitor, and trigger an on-demand scan.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Asset Search](/reference/easm/asset-search/) | `/easm/assets/search` |
| POST | [Asset Export](/reference/easm/asset-export/) | `/easm/assets/search:export` |
| GET | [Asset Detail](/reference/easm/asset-detail/) | `/easm/assets/{asset_id}` |
| POST | [Asset Create](/reference/easm/asset-create/) | `/easm/assets` |
| POST | [Asset Delete](/reference/easm/asset-delete/) | `/easm/assets/search:delete` |
| POST | [Asset Enable Discovery](/reference/easm/asset-enable-discovery/) | `/easm/assets/search:enable-discovery` |
| POST | [Asset Instant Scan](/reference/easm/asset-instant-scan/) | `/easm/assets/{asset_id}/instant-scan` |
| POST | [Asset Set Tag](/reference/easm/asset-set-tag/) | `/easm/assets/search:set-tag` |
| POST | [Asset Set Weight](/reference/easm/asset-set-weight/) | `/easm/assets/search:set-weight` |
| GET | [Asset Instant Scan Status](/reference/easm/asset-instant-scan-status/) | `/easm/assets/{asset_id}/instant-scan-status` |
| PUT | [Asset Update](/reference/easm/asset-update/) | `/easm/assets/{asset_id}` |
| DELETE | [Asset Remove Tag](/reference/easm/asset-remove-tag/) | `/easm/assets/{asset_id}/tags/{tag_id}` |

## Asset Tags

Tags you have put on assets. A tag is identified by its **name** (`{tag_id}` is the tag text).

| Method | Endpoint | Path |
|---|---|---|
| GET | [Asset Tag List](/reference/easm/asset-tag-list/) | `/easm/asset-tags` |
| PUT | [Asset Tag Update](/reference/easm/asset-tag-update/) | `/easm/asset-tags/{tag_id}` |
| DELETE | [Asset Tag Delete](/reference/easm/asset-tag-delete/) | `/easm/asset-tags/{tag_id}` |

## Deleted Assets

Assets that were removed from monitoring.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Deleted Asset Search](/reference/easm/deleted-asset-search/) | `/easm/deleted-assets/search` |
| POST | [Deleted Asset Export](/reference/easm/deleted-asset-export/) | `/easm/deleted-assets/search:export` |

## Asset History

Every change Deepinfo recorded for an asset, per data type (WHOIS, DNS, SSL, port scan, HTTP, web data, IP DNS, IP WHOIS). List endpoints return snapshot ids with their `check_date`; detail endpoints return the full snapshot.

| History | Available for asset types |
|---|---|
| WHOIS, DNS, SSL, port scan | domain, subdomain |
| HTTP, web data | website |
| IP DNS, IP WHOIS | ip |

Requesting a history type the asset does not have returns **404** `30003` (e.g. *"domain asset type does not include ipdns scope."*).

| Method | Endpoint | Path |
|---|---|---|
| GET | [Asset DNS History List](/reference/easm/asset-dns-history-list/) | `/easm/assets/{asset_id}/dns-history` |
| GET | [Asset HTTP History List](/reference/easm/asset-http-history-list/) | `/easm/assets/{asset_id}/http-history` |
| GET | [Asset IP DNS PTR History List](/reference/easm/asset-ip-dns-ptr-history-list/) | `/easm/assets/{asset_id}/ipdns-history` |
| GET | [Asset IP WHOIS History List](/reference/easm/asset-ip-whois-history-list/) | `/easm/assets/{asset_id}/ipwhois-history` |
| GET | [Asset Port Scan History List](/reference/easm/asset-port-scan-history-list/) | `/easm/assets/{asset_id}/port-scan-history` |
| GET | [Asset SSL History List](/reference/easm/asset-ssl-history-list/) | `/easm/assets/{asset_id}/ssl-history` |
| GET | [Asset Webdata History List](/reference/easm/asset-webdata-history-list/) | `/easm/assets/{asset_id}/webdata-history` |
| GET | [Asset WHOIS History List](/reference/easm/asset-whois-history-list/) | `/easm/assets/{asset_id}/whois-history` |
| GET | [Asset DNS History Detail](/reference/easm/asset-dns-history-detail/) | `/easm/assets/{asset_id}/dns-history/{history_id}` |
| GET | [Asset HTTP History Detail](/reference/easm/asset-http-history-detail/) | `/easm/assets/{asset_id}/http-history/{history_id}` |
| GET | [Asset IP DNS PTR History Detail](/reference/easm/asset-ip-dns-ptr-history-detail/) | `/easm/assets/{asset_id}/ipdns-history/{history_id}` |
| GET | [Asset IP WHOIS History Detail](/reference/easm/asset-ip-whois-history-detail/) | `/easm/assets/{asset_id}/ipwhois-history/{history_id}` |
| GET | [Asset Port Scan History Detail](/reference/easm/asset-port-scan-history-detail/) | `/easm/assets/{asset_id}/port-scan-history/{history_id}` |
| GET | [Asset SSL History Detail](/reference/easm/asset-ssl-history-detail/) | `/easm/assets/{asset_id}/ssl-history/{history_id}` |
| GET | [Asset Webdata History Detail](/reference/easm/asset-webdata-history-detail/) | `/easm/assets/{asset_id}/webdata-history/{history_id}` |
| GET | [Asset WHOIS History Detail](/reference/easm/asset-whois-history-detail/) | `/easm/assets/{asset_id}/whois-history/{history_id}` |

## Open Ports

Ports and services found on an asset, their history, and on-demand port scans.

| Method | Endpoint | Path |
|---|---|---|
| GET | [Asset Open Port History List](/reference/easm/asset-open-port-history-list/) | `/easm/assets/{asset_id}/open-ports/history` |
| GET | [Asset Open Port List](/reference/easm/asset-open-port-list/) | `/easm/assets/{asset_id}/open-ports` |
| GET | [Asset Open Port History Detail](/reference/easm/asset-open-port-history-detail/) | `/easm/assets/{asset_id}/open-ports/history/{history_id}` |
| POST | [Asset Instant Open Port Scan](/reference/easm/asset-instant-open-port-scan/) | `/easm/assets/{asset_id}/open-ports/instant-scan` |
| GET | [Asset Open Port Count Timeline](/reference/easm/asset-open-port-count-timeline/) | `/easm/assets/{asset_id}/open-ports/count-timeline` |
| GET | [Asset Open Port State Stats](/reference/easm/asset-open-port-state-stats/) | `/easm/assets/{asset_id}/stats/open-port-state` |

## Asset Timelines

Time series for a single asset. `interval`: `daily`, `weekly` or `monthly`.

| Method | Endpoint | Path |
|---|---|---|
| GET | [Asset Issue Severity Stats Timeline](/reference/easm/asset-issue-severity-stats-timeline/) | `/easm/assets/{asset_id}/stats/issue-severity-timeline` |
| GET | [Asset Security Score Timeline](/reference/easm/asset-security-score-timeline/) | `/easm/assets/{asset_id}/stats/security-score-timeline` |
| GET | [Asset Technology Count Timeline](/reference/easm/asset-technology-count-timeline/) | `/easm/assets/{asset_id}/stats/technology-count-timeline` |
| GET | [Asset Vulnerability Severity Stats Timeline](/reference/easm/asset-vulnerability-severity-stats-timeline/) | `/easm/assets/{asset_id}/stats/vulnerability-severity-timeline` |
| GET | [Asset Website Count Timeline](/reference/easm/asset-website-count-timeline/) | `/easm/assets/{asset_id}/stats/website-count-timeline` |
| GET | [Domain Security Score Timeline](/reference/easm/domain-security-score-timeline/) | `/easm/assets/{asset_id}/stats/domain-security-score-timeline` |
| GET | [Domain Subdomain Count Timeline](/reference/easm/domain-subdomain-count-timeline/) | `/easm/assets/{asset_id}/stats/subdomain-count-timeline` |

## Snapshots

Pre-computed summaries (security score and statistics) of an asset, a domain or your whole attack surface. `instant-snapshot` recalculates one on demand; the result is available shortly after via `latest-snapshot`.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Asset Instant Snapshot](/reference/easm/asset-instant-snapshot/) | `/easm/assets/{asset_id}/instant-snapshot` |
| GET | [Asset Latest Snapshot](/reference/easm/asset-latest-snapshot/) | `/easm/assets/{asset_id}/latest-snapshot` |
| POST | [Domain Instant Snapshot](/reference/easm/domain-instant-snapshot/) | `/easm/assets/{domain_id}/domain-instant-snapshot` |
| GET | [Domain Latest Snapshot](/reference/easm/domain-latest-snapshot/) | `/easm/assets/{domain_id}/domain-latest-snapshot` |
| POST | [Instant Snapshot](/reference/easm/instant-snapshot/) | `/easm/instant-snapshot` |
| GET | [Latest Snapshot](/reference/easm/latest-snapshot/) | `/easm/latest-snapshot` |

## Dashboard

Aggregated statistics across all your assets.

| Method | Endpoint | Path |
|---|---|---|
| GET | [Assets With Most Issues](/reference/easm/assets-with-most-issues/) | `/easm/assets/stats/most-issues` |
| GET | [Assets With Most Websites](/reference/easm/assets-with-most-websites/) | `/easm/assets/stats/most-websites` |
| GET | [Domains With Most Subdomains](/reference/easm/domains-with-most-subdomains/) | `/easm/assets/stats/most-subdomains` |
| GET | [Latest Added Assets](/reference/easm/latest-added-assets/) | `/easm/assets/stats/latest` |
| GET | [Asset Type Stats](/reference/easm/asset-type-stats/) | `/easm/assets/stats/type` |
| GET | [Asset Type Stats Timeline](/reference/easm/asset-type-stats-timeline/) | `/easm/assets/stats/type-timeline` |
| GET | [Insight Stats](/reference/easm/insight-stats/) | `/easm/assets/stats/insights` |
| GET | [Open Port Count Timeline](/reference/easm/open-port-count-timeline/) | `/easm/stats/open-port-count-timeline` |
| GET | [Security Score Timeline](/reference/easm/security-score-timeline/) | `/easm/stats/security-score-timeline` |

## Discovery

Assets Deepinfo discovers around your attack surface, the rules that discover them, and discovery settings.

### Discovered Assets

Candidates found by discovery rules. Each is `in_review`, `approved` (added to your assets) or `ignored`.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Discovered Asset Search](/reference/easm/discovered-asset-search/) | `/easm/discovery/assets/search` |
| POST | [Discovered Asset Export](/reference/easm/discovered-asset-export/) | `/easm/discovery/assets/search:export` |
| GET | [Discovered Asset Detail](/reference/easm/discovered-asset-detail/) | `/easm/discovery/assets/{asset_id}` |
| POST | [Discovered Asset Approve](/reference/easm/discovered-asset-approve/) | `/easm/discovery/assets/search:approve` |
| POST | [Discovered Asset Ignore](/reference/easm/discovered-asset-ignore/) | `/easm/discovery/assets/search:ignore` |
| POST | [Discovered Asset Revert](/reference/easm/discovered-asset-revert/) | `/easm/discovery/assets/search:revert` |
| GET | [Discovered Asset State Stats](/reference/easm/discovered-asset-state-stats/) | `/easm/discovery/stats/asset-state` |

### Discovery Rules

**Smart discovery** and **smart monitoring** rules are managed by Deepinfo (you can tune them); **custom rules** are your own.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Asset Discovery Custom Discovery Rule Search](/reference/easm/asset-discovery-custom-discovery-rule-search/) | `/easm/discovery/custom-rules/search` |
| GET | [Asset Discovery Rule List](/reference/easm/asset-discovery-rule-list/) | `/easm/discovery/rules` |
| GET | [Asset Discovery Smart Discovery Rule List](/reference/easm/asset-discovery-smart-discovery-rule-list/) | `/easm/discovery/smart-discovery-rules` |
| GET | [Asset Discovery Smart Monitoring Rule List](/reference/easm/asset-discovery-smart-monitoring-rule-list/) | `/easm/discovery/smart-monitoring-rules` |
| GET | [Asset Discovery Custom Discovery Rule Detail](/reference/easm/asset-discovery-custom-discovery-rule-detail/) | `/easm/discovery/custom-rules/{rule_id}` |
| GET | [Asset Discovery Smart Discovery Rule Detail](/reference/easm/asset-discovery-smart-discovery-rule-detail/) | `/easm/discovery/smart-discovery-rules/{rule_id}` |
| GET | [Asset Discovery Smart Monitoring Rule Detail](/reference/easm/asset-discovery-smart-monitoring-rule-detail/) | `/easm/discovery/smart-monitoring-rules/{rule_id}` |
| POST | [Asset Discovery Custom Discovery Rule Create](/reference/easm/asset-discovery-custom-discovery-rule-create/) | `/easm/discovery/custom-rules` |
| PUT | [Asset Discovery Custom Discovery Rule Update](/reference/easm/asset-discovery-custom-discovery-rule-update/) | `/easm/discovery/custom-rules/{rule_id}` |
| PUT | [Asset Discovery Smart Discovery Rule Update](/reference/easm/asset-discovery-smart-discovery-rule-update/) | `/easm/discovery/smart-discovery-rules/{rule_id}` |
| PUT | [Asset Discovery Smart Monitoring Rule Update](/reference/easm/asset-discovery-smart-monitoring-rule-update/) | `/easm/discovery/smart-monitoring-rules/{rule_id}` |
| DELETE | [Asset Discovery Custom Discovery Rule Delete](/reference/easm/asset-discovery-custom-discovery-rule-delete/) | `/easm/discovery/custom-rules/{rule_id}` |

### Settings

Discovery-wide settings.

| Method | Endpoint | Path |
|---|---|---|
| GET | [Asset Discovery Settings Detail](/reference/easm/asset-discovery-settings-detail/) | `/easm/discovery/settings` |
| PUT | [Asset Discovery Settings Update](/reference/easm/asset-discovery-settings-update/) | `/easm/discovery/settings` |

## Issues

Security issues detected on your assets, grouped by issue **type** and **category**.

### Issues

Search issues and change their state.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Issue Search](/reference/easm/issue-search/) | `/easm/issues/search` |
| POST | [Issue Export](/reference/easm/issue-export/) | `/easm/issues/search:export` |
| GET | [Issue Detail](/reference/easm/issue-detail/) | `/easm/issues/{issue_id}` |
| POST | [Issue Accept Risk](/reference/easm/issue-accept-risk/) | `/easm/issues/search:accept-risk` |
| POST | [Issue Ignore](/reference/easm/issue-ignore/) | `/easm/issues/search:ignore` |
| POST | [Issue Mark False Positive](/reference/easm/issue-mark-false-positive/) | `/easm/issues/search:mark-false-positive` |
| POST | [Issue Mark Resolved](/reference/easm/issue-mark-resolved/) | `/easm/issues/search:mark-resolved` |
| POST | [Issue Revert](/reference/easm/issue-revert/) | `/easm/issues/search:revert` |

### Issue Stats

Issue statistics across your assets.

Most of them accept these filters:

- `asset`
- `type_id`
- `type_category_id`

| Method | Endpoint | Path |
|---|---|---|
| GET | [Issue Asset Type Stats](/reference/easm/issue-asset-type-stats/) | `/easm/issues/stats/asset-type` |
| GET | [Issue Category Stats](/reference/easm/issue-category-stats/) | `/easm/issues/stats/category-type` |
| GET | [Issue Duration Stats](/reference/easm/issue-duration-stats/) | `/easm/issues/stats/duration` |
| GET | [Issue Severity Stats](/reference/easm/issue-severity-stats/) | `/easm/issues/stats/severity` |
| GET | [Issue Severity Stats Timeline](/reference/easm/issue-severity-stats-timeline/) | `/easm/issues/stats/severity-timeline` |
| GET | [Issue State Stats](/reference/easm/issue-state-stats/) | `/easm/issues/stats/state` |
| GET | [Issue Type Stats](/reference/easm/issue-type-stats/) | `/easm/issues/stats/type` |

### Issue Types

Details, score timeline and snapshot of one issue type.

| Method | Endpoint | Path |
|---|---|---|
| GET | [Issue Type Detail](/reference/easm/issue-type-detail/) | `/easm/issues/types/{issue_type_id}` |
| POST | [Issue Type Instant Snapshot](/reference/easm/issue-type-instant-snapshot/) | `/easm/issues/types/{issue_type_id}/instant-snapshot` |
| GET | [Issue Type Latest Snapshot](/reference/easm/issue-type-latest-snapshot/) | `/easm/issues/types/{issue_type_id}/latest-snapshot` |
| GET | [Issue Type Security Score Timeline](/reference/easm/issue-type-security-score-timeline/) | `/easm/issues/types/{issue_type_id}/security-score-timeline` |

### Issue Categories

Issue categories, with score timeline and snapshot per category.

| Method | Endpoint | Path |
|---|---|---|
| GET | [Issue Categories](/reference/easm/issue-categories/) | `/easm/issues/categories/list` |
| POST | [Issue Categories Instant Snapshot](/reference/easm/issue-categories-instant-snapshot/) | `/easm/issues/categories/{issue_type_category_id}/instant-snapshot` |
| GET | [Issue Categories Latest Snapshot](/reference/easm/issue-categories-latest-snapshot/) | `/easm/issues/categories/{issue_type_category_id}/latest-snapshot` |
| GET | [Issue Categories Security Score Timeline](/reference/easm/issue-categories-security-score-timeline/) | `/easm/issues/categories/{issue_type_category_id}/security-score-timeline` |

## Vulnerabilities

Vulnerabilities (CVEs) that affect technologies found on your assets.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Vulnerability Asset Search](/reference/easm/vulnerability-asset-search/) | `/easm/vulnerabilities/asset-search` |
| POST | [Vulnerability Search](/reference/easm/vulnerability-search/) | `/easm/vulnerabilities/search` |
| POST | [Vulnerability Asset Export](/reference/easm/vulnerability-asset-export/) | `/easm/vulnerabilities/asset-search:export` |
| POST | [Vulnerability Export](/reference/easm/vulnerability-export/) | `/easm/vulnerabilities/search:export` |
| GET | [Vulnerability Detail](/reference/easm/vulnerability-detail/) | `/easm/vulnerabilities/{vulnerability_id}` |
| POST | [Vulnerability Accept Risk](/reference/easm/vulnerability-accept-risk/) | `/easm/vulnerabilities/search:accept-risk` |
| POST | [Vulnerability Ignore](/reference/easm/vulnerability-ignore/) | `/easm/vulnerabilities/search:ignore` |
| POST | [Vulnerability Mark False Positive](/reference/easm/vulnerability-mark-false-positive/) | `/easm/vulnerabilities/search:mark-false-positive` |
| POST | [Vulnerability Mark Resolved](/reference/easm/vulnerability-mark-resolved/) | `/easm/vulnerabilities/search:mark-resolved` |
| POST | [Vulnerability Revert](/reference/easm/vulnerability-revert/) | `/easm/vulnerabilities/search:revert` |
| GET | [Vulnerability Exploitability Score Stats](/reference/easm/vulnerability-exploitability-score-stats/) | `/easm/vulnerabilities/stats/exploitability-score` |
| GET | [Vulnerability Known Exploitable Stats](/reference/easm/vulnerability-known-exploitable-stats/) | `/easm/vulnerabilities/stats/known-exploitable` |
| GET | [Vulnerability Severity Stats](/reference/easm/vulnerability-severity-stats/) | `/easm/vulnerabilities/stats/severity` |
| GET | [Vulnerability Severity Stats Timeline](/reference/easm/vulnerability-severity-stats-timeline/) | `/easm/vulnerabilities/stats/severity-timeline` |

## Technologies

Technologies (software, frameworks, services) detected on your assets.

| Method | Endpoint | Path |
|---|---|---|
| POST | [Technology Asset Search](/reference/easm/technology-asset-search/) | `/easm/technologies/asset-search` |
| POST | [Technology Search](/reference/easm/technology-search/) | `/easm/technologies/search` |
| POST | [Technology Asset Export](/reference/easm/technology-asset-export/) | `/easm/technologies/asset-search:export` |
| POST | [Technology Export](/reference/easm/technology-export/) | `/easm/technologies/search:export` |
| GET | [Technology Detail](/reference/easm/technology-detail/) | `/easm/technologies/{tech_id}` |
| GET | [Most Vulnerable Technologies](/reference/easm/most-vulnerable-technologies/) | `/easm/technologies/stats/most-vulnerable` |
| GET | [Technology End of Life Status](/reference/easm/technology-end-of-life-status/) | `/easm/technologies/eol/{product}` |
| GET | [Technology Vulnerabilities](/reference/easm/technology-vulnerabilities/) | `/easm/technologies/vulnerabilities` |
| GET | [Technology Asset Stats](/reference/easm/technology-asset-stats/) | `/easm/technologies/stats/assets` |
| GET | [Technology Category Stats](/reference/easm/technology-category-stats/) | `/easm/technologies/stats/category` |
| GET | [Technology Count Timeline](/reference/easm/technology-count-timeline/) | `/easm/technologies/stats/count-timeline` |
| GET | [Technology Vulnerability Stats](/reference/easm/technology-vulnerability-stats/) | `/easm/technologies/stats/vulnerability` |