LocateRisk is an external attack surface management (EASM) and security-rating platform. It examines an organisation from the perspective of an external attacker, using externally observable data, and checks areas such as application security, network security, patch management, data breaches, DNS configuration and encryption. Results come in two forms: a management report and a vulnerability dashboard for IT staff. Typical users include operators of critical infrastructure, municipalities, cyber insurers and companies that want to monitor their suppliers and business partners through third-party risk management.
LocateRisk GmbH is headquartered in Darmstadt, Germany; the company details published on its website show no foreign parent company. The pages consulted do not say where the platform processes its data, so organisations should ask for this and record it, together with the sub-processors used, in their data processing agreement. The product is proprietary and not open source, so customers depend on the vendor for the service.