It's 8:00 on a Monday. Dana, the IT director at a 400-person manufacturer, logs in to her vulnerability scanner and finds 212 open findings. Twelve minutes later she's in her attack surface tool, looking at two new subdomains. Are they the servers the scanner just flagged? She can't tell.
