- Home
- Attack Surface
- External Attack Surface Management
- Perimeterator

Perimeterator
A distributed AWS security auditing tool that continuously enumerates and scans internet-facing AWS services to identify potentially misconfigured resources.

Perimeterator
A distributed AWS security auditing tool that continuously enumerates and scans internet-facing AWS services to identify potentially misconfigured resources.
Perimeterator Description
Perimeterator is a distributed security auditing tool designed for continuous monitoring of internet-facing AWS services. The tool automatically enumerates public IP addresses associated with various AWS resources including EC2 instances, Elastic Load Balancers (ELB and ELBv2), RDS databases, and Elasticsearch clusters. The system operates through a distributed architecture using AWS SQS queues for asynchronous communication between components. It consists of scanner workers that can be deployed across different networks to simulate external access patterns and provide visibility into services as they appear from the general internet. The enumeration process identifies potentially misconfigured AWS resources that are exposed to the internet, then queues these targets for network service scanning. Scanner workers process items from the work queue to detect open network services on the identified IP addresses. Deployment is facilitated through provided Terraform configurations, allowing for quick setup within AWS environments. The tool supports continuous auditing workflows by periodically reassessing the attack surface of AWS infrastructure.
FEATURED
Password manager with end-to-end encryption and identity protection features
VPN service providing encrypted internet connections and privacy protection
Fractional CISO services for B2B companies to accelerate sales and compliance
Stay Updated with Mandos Brief
Get the latest cybersecurity updates in your inbox
TRENDING CATEGORIES
POPULAR
Security platform that provides protection, monitoring and governance for enterprise generative AI applications and LLMs against various threats including prompt injection and data poisoning.
A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.