Short answer: Novee helps find and test forgotten internet assets, reducing risk of exploitation. Organizations should review and test all internet-facing assets regularly.
TL;DR
- Novee discovers unknown internet assets.
- Tests for new vulnerabilities and CVEs.
- Helps validate which assets are exploitable.
- Integrates findings with application pentesting.
What happened?
Novee’s External Surface Testing is a tool that helps find and test forgotten internet-facing assets. It identifies web applications, APIs, and other services that may be overlooked. The platform tests these assets for new vulnerabilities and newly disclosed CVEs, validating which are actually exploitable. By doing this, it helps security teams prioritize their efforts and protect against potential attacks.
- Vulnerability
- A mistake or weakness in software that an attacker can misuse.
Key facts
| Reported by | Help Net Security |
|---|---|
| Date reported | 03 Nov 2026 |
How it works
Novee uses AI to find forgotten internet-facing assets like servers and applications. It checks for newly disclosed security flaws. The platform validates if these assets can be exploited and tests how vulnerabilities could combine into bigger attacks.
- Find forgotten assets.
- Test new security flaws.
- Identify combined attack paths.
Timeline
| Date | Event | Source |
|---|---|---|
| 2026-11-03 | Reported by Help Net Security | Help Net Security |
| 2026-11-07 | This Skillmate explainer published | Skillmate |
How to fix it
- Keep systems and network devices updated and follow vendor security notices.
- Make sure an incident response contact and plan exist before an attack happens.
- Ask your service providers which protections they offer, and test them.
What is confirmed
- Reported by Help Net Security
- Reported by novee.security
Why it matters
This matters because attackers look for overlooked internet-facing assets. Companies need to test all their exposed systems to prevent attacks.
Learn the skills behind this story
Want to understand attacks like this and defend against them? Join Skillmate cybersecurity training or practise hands-on in Skillmate Labs.
FAQ
What is External Surface Testing?
It's a new feature in Novee’s AI penetration testing platform that helps find and test internet-facing assets you might have forgotten about.
How does it work?
Novee uses a company name or domain to find web applications, APIs, and other internet-facing services. It tests for new vulnerabilities and imports findings from other tools.
Why is it important?
It helps security teams find and test forgotten assets, reducing the risk of attacks by uncovering unknown vulnerabilities.
Sources
- Novee puts forgotten internet-facing assets through penetration testing (Help Net Security)
- Novee (primary source) (novee.security)
How we wrote this: facts come from the sources above. An on-prem AI model drafted the plain-English parts and every sentence was checked against the sources; unsupported sentences were removed. MITRE mapping is our own judgement.
