What is an attack surface?
An attack surface is the sum of every point where an attacker could try to get in or extract data: internet-facing systems, cloud services, applications, identities and the people and AI agents who use them.
How it works
The digital attack surface covers exposed servers, misconfigured cloud storage and unpatched software. The human attack surface covers the people attackers can reach, the access those people hold, and how they respond to manipulation.
Attack surface management continuously discovers and reduces exposure.
Why it matters
Attackers look for the easiest way in, and it is often a person. Measuring the human attack surface alongside the technical one gives a fuller picture of exposure.
