It covers your internal and external infrastructure: servers, workstations, network devices, cloud workloads, remote access services, internet-facing systems and third-party integrations. You get a full view of your attack surface from both inside and outside.