atksurface
Mapping what attackers see first.
atksurface is an independent security research effort focused on external attack surface management — discovering internet-facing assets, identifying exposed services and misconfigurations, and verifying findings without disrupting the systems involved.
How we work
Non-destructive by design
Observation and safe verification only. No exploitation, no denial of service, no data modification.
Authorized scope only
We assess only assets we own or are explicitly authorized to assess.
Evidence over claims
Every finding is backed by verifiable evidence. When something could not be checked, we say so.
Responsible disclosure
Issues found in third-party products are reported privately to the vendor first.
Contact
Security contact details are also published in security.txt.