NNEAT Surface 1.7 marks the transition from a scanning tool to a full External Attack Surface Management platform. This release incorporates capabilities that previously required multiple independent solutions.

New capabilities

  • Exposed AI agent monitoring: detects publicly accessible AI model endpoints without authorisation.
  • Corporate digital footprint: builds a complete map of the organisation's digital presence using OSINT.
  • Dark web intelligence: expanded sources to detect leaked credentials, mentions and compromised assets.
  • Real-time typosquatting surveillance: identifies lookalike domains and phishing infrastructure before the takedown process completes.

NNEAT MCP Server

Version 1.7 introduces the NNEAT MCP Server, which allows AI assistants such as Claude, Cursor or Windsurf to query security posture, findings and exposure data directly. Security that is queryable from within the development environment.

The detection engine

Surface 1.7 retains the 18-indicator engine with over 300 detections, active and passive vulnerability analysis, and now complements it with real-time external intelligence. The result is continuous visibility of the attack surface — not point-in-time snapshots.