Security teams usually describe an application through the assets they know about. This includes the production domain, documented APIs, the services currently in use, and the repositories connected to the latest release.
Security teams usually describe an application through the assets they know about.
Other forgotten parts of the application can surface through DNS records, certificate data, or information left in client-side code.
This includes the production domain, documented APIs, the services currently in use, and the repositories connected to the latest release.
The page is ready to read now. The fuller skim-friendly version will appear here automatically.
Security teams usually describe an application through the assets they know about. This includes the production domain, documented APIs, the services currently in use, and the repositories connected to the latest release. A staging environment created for an old release may still be online months later, alongside an API version that was supposed to be retired.
Applications leave things behind as they change.
Open the app view to save this story, compare related coverage, and continue from the same source.