---
title: "XM Cyber Exposure Management"
description: 'XM Cyber exposure management: continuous attack surface validation and identification of critical exposure paths within your STACKIT cloud environment.'
scfAsset:
  maintainers:
    - user: "tobias.mueller"
  managed: true
  marketplaceUrl: "https://marketplace.stackit.cloud/en/products/xmcyber-8e2a5a5d"
  category: "guide"
  external: false
  tags: ["Security", "Compliance", "wip"]
source_url: "https://framework.stackit.cloud/architecture/assetcontainer/tm/xm-cyber/"
source_file: "docs/architecture/assetcontainer/tm/xm-cyber.mdx"
---

<Aside type="note" title="Asset Profile">
  **Time Estimate:** 45 Minutes **Focus:** Continuous Threat Exposure Management
  (CTEM) **Learning Goals:** * Understanding the security perspective on STACKIT
  infrastructure. * Identifying and closing critical "Choke Points". *
  Prioritizing vulnerabilities based on actual reachability. * Integrating
  hybrid security views (On-Premises to Cloud).
</Aside>

## Why this Asset?

Traditional vulnerability scanning provides long lists of CVEs but lacks context. XM Cyber adds the "So what?" by showing if a vulnerability actually leads to a business-critical asset.

**Your Benefits:**

- **Contextual Security**: Focus on the 1% of risks that actually matter.
- **Exposure Path Visualization**: See exactly how a threat could move through your SKE clusters or VMs.
- **Proactive Defense**: Close "Choke Points" to remove multiple threat vectors at once.
- **Hybrid Visibility**: Seamlessly monitor security across your local data centers and STACKIT projects.

---

## The Architecture: Understanding Exposure

XM Cyber acts as a virtual security assessment, constantly simulating potential breach points and lateral movement.

### The Exposure Management Journey

<Steps>
  1. **Asset Discovery**: The platform identifies all resources within your
  STACKIT project (VMs, SKE, Identities). 2. **Exposure Identification**: It
  looks for vulnerabilities, misconfigurations, and overly permissive
  credentials. 3. **Simulation**: XM Cyber runs safe simulations to find paths
  toward your "Critical Assets". 4. **Choke Point Analysis**: The system
  identifies key nodes where multiple paths converge. 5. **Prioritization**:
  Risks are ranked based on their potential impact on your business continuity.
  6. **Remediation Guidance**: You receive step-by-step instructions on how to
  resolve the exposure. 7. **Verification**: Once a fix is applied, the system
  verifies that the path is closed. 8. **Continuous Loop**: The process repeats
  to detect new exposures caused by deployment changes.
</Steps>

---

## Key Capabilities: Hardening your Footprint

This asset provides a comprehensive toolkit to move from reactive patching to proactive exposure management.

<CardGrid>
  <Card title="Exposure Path Management" icon="magnifier">
    Visualize the hidden connections between simple misconfigurations and
    critical data breaches.
  </Card>
  <Card title="Choke Point Discovery" icon="Target">
    Identify the most efficient points to apply security fixes, maximizing the
    impact of your security team.
  </Card>
  <Card title="Hybrid Monitoring" icon="overlap">
    Consolidate your security posture across the STACKIT Cloud and your existing
    infrastructure.
  </Card>
</CardGrid>

---

## Integration: The `Agentless` Advantage

XM Cyber integrates into the STACKIT ecosystem with minimal friction, utilizing modern collection methods.

### Solution Highlights:

- **SaaS-based**: No heavy infrastructure management required within your projects.
- **`Agentless` Collection**: High-speed discovery without installing software on every single workload.
- **Identity-Centric**: Deep analysis of IAM roles and service accounts to prevent lateral movement.

<Aside type="note" title="Pro-Insight">
  Use XM Cyber during your "Migration Phase" to ensure that newly moved
  workloads do not open legacy exposure paths into your cloud landing zone!
</Aside>

---

## Further Resources

<LinkCard
  title="XM Cyber on the STACKIT Marketplace"
  href="https://marketplace.stackit.cloud/en/products/xmcyber-8e2a5a5d"
/>

<LinkCard
  title="Official XM Cyber Website"
  href="https://xmcyber.com/"
/>