Browsing: IT attack surface management