Attack Surface Management is an independently sold security feature. We recommend using it with Security Center Premium Edition or later and the Cloud Security Posture Management feature. When the number of assets grows beyond the purchased quota, burstable protection automatically covers the excess.
Purchase Attack Surface Management
-
Go to the Attack Surface Management purchase page and complete the following configuration:
Parameter
Description
Attack Surface Management edition
Only Basic Edition is currently supported.
Assets
The number of authorizations for protected assets. One asset consumes one authorization. For details about credits, see Billing below.
Duration
Service duration. We recommend selecting auto-renewal to prevent service interruptions caused by resource expiration.
-
After you complete the configuration, click Buy Now.
Enable and disable Full Protection
After you purchase Attack Surface Management, Full Protection is enabled by default. You can also manually enable or disable burstable protection.
After Full Protection is enabled, when the number of authorizations or credits exceeds the subscription quota, the excess is automatically billed at overage rates to ensure that security protection is not interrupted due to quota exhaustion.
Log on to the Security Center console.
On the Overview page, in the Attack Surface Management section, turn on or turn off the Full Protection switch.
Change configuration (upgrade or downgrade)
-
Log on to the Security Center console.
-
On the Overview page, in the Attack Surface Management section, click Change Configuration.
-
In the configuration change, select Upgrade Now or Specification Downgrade to go to the configuration page.
-
Re-enter the asset count, and then click Buy Now.
Billing
Attack Surface Management is billed based on the number of authorizations for protected assets. Each authorization includes a certain number of credits.
Credits are the scanning quota unit for Attack Surface Management, used for attack path mapping of exposed assets, intelligent risk analysis, and generation of remediation suggestions. The actual credit consumption depends on system usage.
-
Subscription quota: USD 5 per authorization per month, each authorization includes 6,000 credits.
-
Overage pricing (after Burstable Protection is enabled, the following rates apply when the subscription quota is exceeded):
-
Overage authorizations: USD 0.5 per authorization per day, each overage authorization includes 200 credits.
-
Overage credits: USD 0.0015 per 100 credits.
-
For more billing details, see Billing overview.
Expiration or unsubscription
After the subscription expires or you self-unsubscribe from Attack Surface Management via the Unsubscription management page, the following impacts apply:
-
Instance status: The instance is immediately released and protection stops.
-
Burstable protection: Burstable protection immediately becomes invalid and stops billing. Elastic authorizations and credits consumed on the current day are billed the next day.
-
Data retention:
-
Feature policy configuration data is retained permanently.
-
Asset and attack path scanning task data is retained for only 7 days and then permanently released.
-