https://vesperid.com/en/guides Each guide takes about ten minutes and ends with the questions we get during scoping. None of them assumes you become a client. en Sat, 05 Sep 2026 12:00:00 GMT https://vesperid.com/en/guides/what-is-threat-exposure-management https://vesperid.com/en/guides/what-is-threat-exposure-management Threat exposure management (TEM, or CTEM in its continuous form) consists of identifying at all times what an organisation exposes on the outside, qualifying what is genuinely exploitable and treating the exploitable first, as a complement to internal protection, never in its place. Sat, 05 Sep 2026 12:00:00 GMT https://vesperid.com/en/guides/what-is-a-stealer-log https://vesperid.com/en/guides/what-is-a-stealer-log A stealer log is the archive an information stealer produces on an infected machine: passwords saved in the browser, session cookies, forms, files and the system fingerprint, resold in batches on cybercriminal markets and exploitable until the accesses it holds have been revoked. Sat, 05 Sep 2026 12:00:00 GMT https://vesperid.com/en/guides/what-is-the-external-attack-surface https://vesperid.com/en/guides/what-is-the-external-attack-surface The external attack surface is everything an organisation exposes on the internet that an attacker can reach without any account: hosts, ports, services, certificates, applications, subdomains and the assets of subsidiaries or contractors, including those the internal inventory ignores; managing it (EASM) means discovering, monitoring and reducing it continuously. Sat, 05 Sep 2026 12:00:00 GMT https://vesperid.com/en/guides/responding-to-compromised-credentials https://vesperid.com/en/guides/responding-to-compromised-credentials Faced with compromised credentials, you qualify the leak, contain the access, look for reuse and origin, check whether it was already used, then notify and document. Wed, 02 Sep 2026 12:00:00 GMT https://vesperid.com/en/guides/check-domain-impersonation https://vesperid.com/en/guides/check-domain-impersonation To find out whether your domain is being impersonated, generate its plausible variants, look them up in domain registries and certificate logs, examine their DNS and content, then request the removal of those imitating your brand. Wed, 02 Sep 2026 12:00:00 GMT https://vesperid.com/en/guides/dark-web-monitoring-what-to-watch https://vesperid.com/en/guides/dark-web-monitoring-what-to-watch Useful dark-web monitoring for a company looks at six things: its domains and addresses in leaks, its brands and keywords on forums and marketplaces, its executives, its suppliers on leak sites, its data and documents, and access to its systems being sold. Wed, 02 Sep 2026 12:00:00 GMT https://vesperid.com/en/guides/nis2-external-exposure-checklist https://vesperid.com/en/guides/nis2-external-exposure-checklist The NIS2 directive expects essential and important entities to manage their risks, including those of their supply chain, and to notify significant incidents within 24 and then 72 hours: monitoring external exposure is one of the most direct ways to meet that. Wed, 02 Sep 2026 12:00:00 GMT https://vesperid.com/en/guides/vesperid-vs-doing-it-yourself https://vesperid.com/en/guides/vesperid-vs-doing-it-yourself Monitoring your own external exposure is possible with public tools and analyst time; a managed service brings access to closed sources, continuity, human qualification and takedown handling, at the cost of an annual subscription. Wed, 02 Sep 2026 12:00:00 GMT