How does EdgeProtect fit into the platform?

EdgeProtect is the attack surface capability within Precursor Intelligence. It covers internet-facing hosts, ports, services, TLS, DNS and changes over time. Exposure findings can inform remediation, penetration testing and conversations about managed monitoring.

Do I need to install an agent or replace my scanner?

No agent is installed on your systems. You can define your technology stack, bring in supported scanner exports or use Tenable sync. EdgeProtect provides external attack surface visibility; it does not replace an internal scanner or a penetration test.

Does an exploitation signal mean our systems are compromised?

No. Exploitation telemetry describes observed activity and helps prioritise investigation. Your team still needs to confirm the affected version, exposure, controls and business impact in your own environment.

Is platform access included with SOC or penetration testing?

Platform access and managed service scope are separate decisions. Ask us to confirm the capabilities, usage and analyst support included in your proposed engagement. This page does not imply that every feature is included in every service.

Can we get help acting on the findings?

Yes. Discuss a penetration test to validate exposure, or SOC/MDR services for ongoing monitoring and response. A platform account alone does not commission testing or automatically place your organisation under managed monitoring.

What is continuous threat exposure management?

Continuous threat exposure management is an ongoing process of scoping, discovering, prioritising, validating and acting on exposure. Precursor Intelligence supports the discovery and prioritisation work; your team and agreed services determine validation and remediation.

How should we use the financial exposure estimate?

Treat it as a modelled estimate to support discussion. Review its inputs, assumptions and limitations; it is not a prediction of a particular incident or guaranteed financial loss.

Precursor Intelligence

Know what to fix next.

Bring external exposures, exploitation evidence and the technology you run into one view. Prioritise the next action for your team, with no agents to install.

Explore the platform View sample exposure report

EdgeProtect attack surface visibility

App, API and MCP access

Illustrative workflow. Not a live scan or product screenshot.

EdgeProtect · external attack surface

An external service needs a closer look

An internet-facing remote access service appears in the estate. Confirm the asset owner and the version actually deployed.

Evidence: External service observation
Next action: Confirm ownership and affected version
Owner: Infrastructure team

Exposure and threat evidence guide investigation; they do not prove your systems have been compromised.

Scroll

From your estate to your next action.

Start with the technology you run. Add external exposure and exploitation evidence. Work through a prioritised action plan, with the context available to your team and your tools.

Your EstateWhat is exposed, and what deserves attention, scoped to the technology you run.

Priority dashboard: Rank open flaws by Precursor Risk Score, with exploitation evidence beside the priority.
My Vulnerabilities: Filter CVEs to the products in your technology stack instead of working through a generic feed.
Action Plan: Turn prioritised intelligence into a remediation to-do list your team can work through.
Technology Stack: Record the products you run so intelligence can be scoped to your environment.
Alerts: Receive alerts when a relevant vulnerability gains exploitation evidence or an external exposure appears.
Industry view: Use sector-specific threat context to inform which issues deserve attention.
EdgeProtect attack surface: Explore internet-facing hosts, ports, services, TLS, DNS, network relationships and changes over time, with no agents installed.
Exposed credentials: Identify staff logins found in external breach data for investigation and appropriate account protection.
Domain and SSL monitoring: Track certificate expiry and look-alike domains associated with your organisation.
Brand impersonation: Investigate fake sites and domains using your brand to target customers or staff.
Supply-chain lockfiles: Check dependencies in your builds against package risk and incident intelligence.

Intelligence LibraryThe evidence behind your priorities, ready for investigation and enrichment.

CVE intelligence: See EPSS, CISA KEV status, CWE, linked threat actors and the Precursor Risk Score together.
CISA KEV and the CISA gap: Compare the known-exploited catalogue with additional CVEs observed in exploitation telemetry.
EPSS prioritiser: Use estimated exploitation probability alongside severity and the impact on your organisation.
CWE taxonomy: Understand the weakness patterns behind vulnerabilities to address recurring classes of issue.
Threat actors and groups: Explore actor tooling and campaigns relevant to your sector and environment.
Ransomware index: Review group activity, published victim reporting and trends affecting your industry.
In-the-wild telemetry: Examine Shadowserver honeypot attack observations by CVE and geography.
IOC database: Look up indicators of compromise to support analyst triage and enrichment.
Malware samples: Use malware-family intelligence and file hashes for correlation and detection work.
Blacklists: Check SSL and JA3 fingerprints associated with malicious infrastructure.
MITRE ATT&CK: Map threat context to tactics and techniques for coverage and detection planning.
Atomic Red Team tests: Find technique-specific validation tests for use within an authorised testing scope.

Delivery & PlatformGet intelligence into your tools, team workflows and board conversations.

REST API: Query intelligence from your own tooling using bearer-token authentication.
MCP server: Give AI assistants and agents access to intelligence through the platform’s MCP tools.
Webhooks: Send exploitation and exposure events into the channels your team already uses.
Scan ingestion: Bring in Nessus, Qualys, Tenable and other scanner exports to add exploitation context to findings.
Tenable sync: Keep your Tenable estate aligned with Precursor prioritisation without repeated manual exports.
Board pack and weekly report: Produce a board-ready PDF and weekly exposure digest for review and reporting.
Financial exposure estimator: Discuss a modelled financial estimate alongside its assumptions, rather than treating it as a prediction of loss.
Statistics: Track programme-level trends over time to assess changes in security posture.
Organisation and access: Manage team settings, API keys, notification routing and subscriptions in one place.

Explore EdgeProtect ASM Understand vulnerability prioritisation Connect API and MCP tools

A clearer board conversation.

Show what needs attention, the evidence behind it and who owns the next step. The platform's board pack and weekly report help bring technical priorities into that conversation.

Review trends alongside their context. Financial exposure is a modelled estimate with assumptions, not a prediction of loss.

Discuss your reporting needs

Exposure briefing

Illustrative report structure. No customer data or live account results.

Priority: Investigate an externally visible remote access service.
Evidence: Service observation and exploitation context. The deployed version still needs confirmation.
Business context: The service owner needs to confirm which operations depend on it.
Next action: Validate applicability, agree remediation and check the result.
Accountability: Assign a service owner and a review date.
Board decision: Agree the resources and timetable for the validated remediation.

This example explains the information to review. Your report depends on the estate, evidence and configuration in your account.

Intelligence informs the work. Your team chooses the next step.

Use the platform yourself, connect your tools or bring in our specialists. Platform access and managed service scope are agreed separately.

Validate your exposures

Give your penetration test a clearer starting point. Confirm which exposures can be exploited within an agreed testing scope.

Explore penetration testing

Plan ongoing protection

Discuss how exposure intelligence fits your monitoring, investigation and response requirements with our SOC team.

Explore managed SOC

Choose how to get started.

Use the platform

Create an account on Precursor Intelligence. Start with the available free intelligence tier, then review the features and usage you need.

Create a free account

Opens precursorintelligence.com. Free account access does not mean every feature or ASM scan is free.

Check current plans Log in

Work with our team

Tell us whether you need external exposure visibility, help interpreting findings or managed monitoring. We will discuss the right scope with you.

Discuss platform and ASM

An enquiry starts a conversation. It does not book testing or start a scan.

Building an integration? Explore MCP access or review the threat intelligence platform.

Before you get started

Precursor Intelligence combines external attack surface visibility, vulnerability prioritisation and threat context, scoped to the technology you run. People use the app; tools and AI agents can query intelligence through the REST API and MCP server.