security//attack surface

An attack surface is the set of reachable interfaces, inputs, identities and dependencies through which a system might be influenced or compromised. APIs, plugins, ports, parsers, credentials and tool integrations all count when an attacker can reach them.

An attack surface is the set of reachable interfaces, inputs, identities and dependencies through which a system might be influenced or compromised. APIs, plugins, ports, parsers, credentials and tool integrations all count when an attacker can reach them.

Adding a tool to an agent therefore performs two operations at once: it increases useful capability and enlarges the set of components whose failure may matter. Surface is not the same as vulnerability, but a vulnerability outside the reachable surface is much harder to exploit.

Capability has an exterior wall. Every new door deserves a lock and a reason.