External Attack Surface Management Combining OSINT With Human Analyst Review

AIS Advanced IT-Security Solutions is a German cybersecurity company that helps organizations see their internet-facing footprint the way an attacker does. Founded in late 2020 as a spin-off of the CISPA Helmholtz Center for Information Security and based in St. Ingbert, Saarland, it was set up to carry academic security research into commercial products. The intended customers are businesses and the wider ecosystem around them that need to understand where they are externally exposed and how that exposure changes.

The commercial product, Findalyze, is delivered as SaaS and needs only a domain or an email address to begin. It enumerates the internet-connected hardware, software, SaaS and cloud resources tied to an organization using open-source intelligence, then tracks how that inventory shifts over time. Checks span open ports, security headers, certificate problems, SPF records, software versions, blacklist entries, leaked credentials, subdomain takeover conditions, and assets that newly appear or quietly disappear. Findings are prioritized and paired with remediation guidance.

What separates the approach from purely automated scanning is the human layer: one or more security experts are assigned to enrich machine-generated findings before they reach the customer, with advisory engagements available when internal teams need help acting on them. Multi-tenant dashboards, REST API access, ticketing and monitoring-system connectors, email alerting, and CSV or PDF export make the platform workable for managed service providers as well as individual companies. A 14-day trial is offered without a credit card.