conceptbeginnerReviewed May 18, 2026
Asset tracking overview
Understand how NullSquare records attack surface over time.
Asset states
- Candidate: discovered but not usually shown as a primary managed asset.
- Validated: confirmed live or reachable.
- Managed: intentionally tracked and prioritized by your team.
What assets can show
- Services and ports.
- HTTP endpoints.
- Technologies.
- Subdomains and observations.
- Related findings.
- Run history and coverage notes.