Your attack surface is your public presence and information on the internet. It includes:

• Domains & subdomains you own
• Websites and technologies they use
• Cloud services you use
• IP addresses
• Email servers & settings
• User accounts and credentials