# Seeking Alpha Testers for Takumi ASM

We are seeking alpha testers for the upcoming **Attack Surface Management (ASM)** capability in Takumi. The alpha test is free and focuses on discovering internet-facing assets associated with your domains from publicly available information.

![Takumi ASM alpha tester recruitment](/docs/_md-assets/38b4d9c723-eyecatch.png)

## What the Alpha Test Does

The initial alpha focuses on asset discovery. Takumi uses publicly available information and performs only minimal crawling of the assets it finds. It does not attempt logins, perform malicious actions, or run invasive tests against your applications.

For each ASM run, approximately two browser accesses per asset is the general guideline for the traffic sent. The execution frequency during the alpha test will vary depending on development and testing needs. To minimize the impact on target assets, ASM runs associated with any single organization will be limited to a maximum of five per hour.

## What Participants Receive

After the alpha test concludes, we plan to provide each participating organization, where possible, with a data-based list of the assets discovered for it. These results can help you identify shadow assets that were not previously known within your organization, update your inventory of internet-facing assets, and inform the scope and priorities of future vulnerability assessments and penetration tests.

Results will not initially be available in the Takumi user interface, and the alpha test does not guarantee comprehensive asset discovery.

Your participation and feedback will help improve how Takumi associates assets with their owners and prioritizes the assets that warrant closer review.

## Future Plans

We plan to extend ASM so that it can select discovered attack-surface assets for review with Takumi's penetration testing capability and, where appropriate, automatically assess those targets. The alpha test itself does not perform these penetration tests.

ASM is planned as a paid Takumi capability in the future.

## How to Participate

To join the free alpha test, contact your GMO Flatt Security sales representative or email [shisho-support@flatt.tech](mailto:shisho-support@flatt.tech).

You can use the following email template when applying:

```text
Subject: Application for the Takumi ASM Alpha Test

I would like to apply to participate in the alpha test of Takumi's ASM capability.
Please use the following domains as starting points for asset discovery:

- aaa.example (known subdomain: xxx.aaa.example)
- bbb.example
```

Please include a list of domains that your organization knows it owns. We will use these domains as starting points for asset discovery. You may share only what you are comfortable providing, but please include at least one domain. If you would be open to providing further assistance with product improvement, we would also appreciate a list of subdomains associated with those domains. This information will help us evaluate and improve discovery accuracy.