By Each feature that you add to a website results in a new element that has to be managed.
The credentials are accepted by a login page, the data by a contact form, new code is introduced by a plugin, and an API is used to connect your website to another service. It is also possible that an old staging site or a forgotten backup may still be accessible from the internet.
The collection of these exposed components constitutes your website attack surface.
Comments