Attack Surface Management (ASM) is a security product category that provides continuous discovery, inventory, and monitoring of an organization's external and internal assets. It helps security teams identify potential entry points for attackers, including cloud resources, endpoints, and third-party dependencies, enabling proactive risk reduction.