What is an Asset?

Assets are machines that are deployed on the Internet that are a part of an organization’s externally facing infrastructure. They represent real-world observations of active systems.

Asset Resources

Asset Importance

Each asset is scored for importance, and lower-importance assets in larger entities may not be included for performance reasons. Importance is categorized as Low, Medium, High, or Critical.

Asset Types

The types of machines that are deployed on the Internet.

How Assets are Detected and Identified

How data is used to detect active systems and identify assets that are in use and the amount of usage (e.g., more DNS lookups indicate higher usage and importance).

Presentation

The machines are presented by their asset type slug name in Bitsight applications, such as in the following pages:

• Assets Tab
• Attribution Tab
• Client Risk: Assets
• Critical Assets
• Third Party Assets

Notes on Subdomains

Subdomains are often treated as parts of the main domain. All findings associated with a given subdomain roll up to the attributed subdomain or domain.

How come some subdomains not included in Assets even though they are reachable?

• Some subdomains might not appear in Attribution since it focuses on broader categories like domains and CIDR blocks.

  Example: If a finding is generated for academy.bitsight.com, it is attributed to the organization responsible for bitsight.com.

• Subdomains can be reachable without being included in the Assets tab if they haven't been flagged as important or are inactive.

Assets & Findings

Why do some assets not have findings?

We attempt to identify findings for every asset, but not every asset necessarily has a finding. This is because the asset is part of the organization’s infrastructure, but no relevant events or records were observed in the asset to generate a finding.