AYAsec

AYAsec is an external attack surface management platform. It discovers your internet-facing assets, scans them across TLS, HTTP, open ports, DNS and domain reputation, detects known CVEs per host, and grades every asset from A+ to F so you can see what changed since last week. Most external attack surface tools infer your asset list from public data - certificate transparency logs, passive DNS, naming patterns. That finds hosts nobody remembered, but it also attributes hosts that were never yours, and once an engineer finds someone else's server in a report, every finding becomes suspect. AYAsec can import the list from the DNS zone you already control, or from a zone file you upload, and discovery then finds what is missing from it. Every asset must pass domain ownership verification before it is scanned - a DNS record, a file on the server, or a meta tag. A tool that scans any domain on request is a reconnaissance service, not a security product. Scans run on a schedule or on events, and you are told when a grade drops rather than having to go and look. Reports export to PDF and can be shared by link. There is a public REST API, an MCP server for AI agents, and integrations with Slack, Jira, Microsoft Teams and Linear. Pricing is flat per organization, not per asset, so the bill does not jump when you add domains. There is a free plan. Not an EDR. Not a WAF. Not an internal network scanner, and not a penetration testing service.