Why it matters
Subdomains from projects nobody remembers, expired certificates, ports left open from a test. It takes no sophisticated attack: it's enough that nobody is looking at what's already exposed.
What it solves
Periodic scanning of your external footprint with a clear view of exactly what an attacker sees of your infrastructure, in plain language.