External findings

If you have other sources of information that contribute to your external attack surface profile – like a penetration test or other OSINT data - you can now add these to Glasstrail as external findings.

This means you can track all your findings in one place, for a clear view of your external attack surface.

What's different about external findings?

The key difference between external and other finding types is that they are user-added. They are not detected as part of a regular Glasstrail scan.

How do I add external findings?

Towards the bottom of your Glasstrail dashboard you’d find a new “External” findings area with a button +Add

On the pop-up finding card, you can select whether to classify the finding as an issue or risk, choose the severity, and add relevant details.