https://www.pivotpointsecurity.com/is-attack-surface-management-right-for-smbs/