Asset Discovery is a feature designed to make External Monitoring easier and more valuable for suppliers. It automatically identifies internet-facing assets that may belong to your organisation, helping you ensure your Risk Ledger profile reflects your true digital footprint.

Currently, External Monitoring relies on suppliers manually adding assets. This can take time and sometimes leads to gaps between what is monitored and what clients actually use. Asset Discovery helps bridge that gap by suggesting assets automatically, improving visibility and reducing setup effort.

By confirming discovered assets, you help ensure your clients see an accurate, up-to-date view of your organisation's security posture, while keeping full control of what’s included.

Asset Discovery uses publicly available information to identify potential assets related to your organisation. For example, if you've registered example.com, we may find related domains or subdomains such as example.io or app.example.com, and verify them against trusted domain registries.

Importantly, no probing or intrusive scanning is performed - all discoveries are based solely on public data sources.

You remain in full control of your profile.

When new assets are discovered, you'll see them listed in External Monitoring > Assets > Discovered Assets:

From there, you can Verify (1) all assets that belong to your organisation, or Approve (2) or Reject (3) individual assets:

Verified assets will display a check-mark to make it clear that they've been confirmed by your organisation:

Rejecting any individual assets will offer the option to select reasons for any rejections:

You'll also be alerted to newly discovered assets from your Security Profile page: