Risk engine inputs

Assets, vulnerabilities, vendors, agents, and exposure

Your security reality is not one scanner feed. It is assets, vulnerabilities, vendors, agents, and exposure changing every week. Blackhount brings those signals together so the risk engine can decide what changed and what to do.

Email [email protected] Start free trial

Why five inputs, not one dashboard

Attackers do not respect product categories. They follow whatever is reachable: a forgotten subdomain, a weak email authentication record, a vendor that slipped, or an AI agent that suddenly gained a new tool. If your tooling only watches one of those surfaces, you get a false sense of coverage.

Blackhount Watch models security as a set of related signals. Together they describe what can be reached, what is weak, who expands your blast radius, and how AI agents change the picture. Those signals are the fuel for the central risk engine.

Assets

Assets are the internet-facing resources you enroll for Attack Surface Monitoring: domains and related external surfaces that represent your public footprint. If you do not know what you own on the internet, every other control is guessing.

Watch keeps those assets under continuous review so new findings attach to something concrete, not a generic alert stream. Capacity scales by plan: Watch covers up to five external assets, Watch Pro expands that further for larger environments.

Vulnerabilities and misconfigurations

Not every risk is a CVE with a patch. Many of the issues that take companies offline or fail a questionnaire are misconfigurations: expired or weak TLS, missing security headers, broken SPF/DKIM/DMARC, or exposed paths that should never have been public.

Blackhount records findings with evidence and remediation guidance. The point is not to flood you with theoretical weakness. It is to show what is wrong on the surfaces you care about, with enough detail to fix it.

Vendors

Your risk includes people you do not control. Payment processors, SaaS tools, agencies, and suppliers can all change your exposure when their posture slips. Vendor monitoring on higher tiers tracks third-party domains so supplier risk is not invisible until a customer asks about it.

That matters for questionnaires and cyber insurance conversations, where “we only watch our own site” is no longer a complete answer.

Agents

AI agents introduce a second attack surface: what your software can reach on your behalf. MCP servers, tools, and permissions can expand faster than traditional change control expects.

Free Agent Check gives you a local point-in-time view with nothing uploaded and no account required. Continuous Agent Security inventory and monitoring are part of Watch Pro for enrolled endpoints. Both feed the same operating model: know what exists, notice when it changes, and decide what to do.

Exposure

Exposure is the practical question: what is reachable right now, and how did that shift? A control that looked fine last month can drift. A new subdomain can appear. An agent can gain a capability that was not there yesterday.

Exposure is why continuous monitoring beats a one-time report. The risk engine uses exposure over time to separate material change from noise, then push required action and verification.

Why siloed tools fail

ASM tools, CVE scanners, vendor questionnaires, and AI inventories rarely share context. Each produces its own backlog. Nobody owns the join between “new agent tool” and “new external exposure,” or between “vendor slipped” and “customer asks for proof this week.”

Blackhount’s model treats these as inputs to one decision system so you can move from raw findings to required action and verified remediation.

Where this goes next

Once signals are collected, the risk engine determines what materially changed, what matters, what action is required, and how to verify remediation.

FAQ

What counts as an asset in Blackhount Watch?

Internet-facing resources such as domains and related external surfaces you enroll for Attack Surface Monitoring.

Are AI agents included?

Yes. Free Agent Check assesses locally. Watch Pro adds continuous Agent Security for enrolled endpoints.

Why group these five signals together?

Because real risk spans external infrastructure, third parties, and AI agent capabilities. Treating them as separate products leaves gaps the risk engine needs to close.

Turn your security on.

Email [email protected] to activate Watch or Watch Pro, or start a free trial without a card.

Contact hello@ Start free trial