ASM (Attack Surface Management) refers to regularly checking the attack surface (vulnerability) of IT systems and applications owned by a company and managing risks. By identifying applications, devices and network assets that attackers can exploit, you can manage attack risk and improve threat defense.