Question: Do you know of any tool that offers automated discovery and inventory of internet-facing assets for attack surface intelligence?

One of the highest rated is CrowdStrike Falcon Surface. It offers a single pane of glass view of internet-facing assets to help you see and prioritize vulnerabilities. It continuously maintains asset inventory and adversary-driven prioritization based on industry, attack history and CVE scores. With remediation steps guided by CrowdStrike, CrowdStrike Falcon Surface helps organizations shrink their external attack surface and improve their overall cybersecurity posture.

Another top pick is Censys, an Attack Surface Management and Threat Hunting platform. Censys offers a complete view of internet intelligence -- connections, configurations, and threat data -- so you can continuously monitor your attack surface and stay ahead of emerging threats with real-time context, accurate attribution and powerful threat hunting. Tiered pricing options are available to suit different organizational needs.

Shodan gives you a wide view of exposed services, letting you monitor network security and make business decisions. It indexes the entire Internet once a week and offers real-time alerts, a developer API, and IP enrichment with more information. Shodan is good for monitoring network exposure and visualizing Internet-connected devices.

If you want a more detailed cyber asset analysis, check out JupiterOne. The service ingests and analyzes asset data in real time, offering features like asset inventory, graph-based context visualization and compliance mapping to standards like PCI-DSS and HIPAA. JupiterOne is geared for large enterprises with thousands of cyber assets, helping them identify security vulnerabilities and automate compliance and incident response.