Organization Attack Surface Mapper
Maps an enterprise's complete corporate-family internet footprint from legal identity down to dark netblocks and owned assets with rigorous attribution discipline.
The Organization Attack Surface Mapper skill empowers security teams and red teams to systematically uncover an organization's full digital footprint starting from its legal entity name rather than a single seed domain. By integrating the GLEIF LEI API, SEC-EDGAR filings (Exhibit 21), OpenCorporates, and Wikidata corporate graphs, it traces parent-subsidiary hierarchies down to associated domains, netblocks, and ASNs. Featuring robust attribution safeguards like independent-evidence scoring, hyperscaler scope guards, and a strict discover-only promotion gate, it prevents accidental out-of-scope scanning and eliminates cloud over-attribution during M&A due diligence, bug-bounty scoping, and external attack surface assessments.