> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/get-started-with-exposure-management.md).
# Get started with Exposure Management
Complete the steps in this section to set up Exposure Management and begin to customize it to meet your organization's unique requirements. All of these steps are optional, but recommended.
| Step | Description | More information |
| --------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Step 1: Configure the Cortex Network Scanner and other Palo Alto Networks sensors | These sensors scan your environment and ingest vulnerabilities so you can review, prioritize, and take action on them from one central location. | |
| Step 2: Configure third-party integrations | Exposure Management can ingest vulnerabilities from Tenable.io, Tenable.sc, Rapid7 InsightVM, and Qualys VMDR scanners. | [Ingest assets and vulnerabilities from third-party applications](/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/ingest-assets-and-vulnerabilities-from-third-party-applications.md) |
| Step 3: Ingest assets and vulnerabilities using the API | The Vulnerability Ingest API imports vulnerabilities and assets from your third-party tools directly into your asset inventory and vulnerability management workflows. | [Ingest assets and vulnerabilities from third-party applications](/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/ingest-assets-and-vulnerabilities-from-third-party-applications.md) |
| Step 4 Enable Attack Surface Testing (AST) | AST validates that vulnerabilities are exposed to the internet and provides additional context for compensating controls. | [Attack Surface Testing](/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/attack-surface-testing.md) |
| Step 5: Review vulnerability policies | Review the out-of-the-box vulnerability policies and create custom policies to define which vulnerabilities trigger creation of an issue or other actions. | [Vulnerability policies](/cortex-xsiam/detect-investigate-and-respond-to-threats/vulnerability-management/vulnerability-policies.md) |
| Step 6: Review attack surface rules | Attack surface rules determine which attack surface management (ASM) findings create issues. Review the default enabled attack surface rules and enable or modify rules as needed. | [Attack surface rules](/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/attack-surface-management-detections/attack-surface-rules.md) |
| Step 7: Set up asset groups | Asset groups can be used to:
- define the scope of vulnerability policies
- configure scope-based access control (SBAC), so users only see vulnerabilities for the assets they own
| [Asset Groups](/cortex-xsiam/detect-investigate-and-respond-to-threats/asset-management/asset-groups.md) |
| Step 8: Enable issue enrichment and remediation automation | Install the Exposure Management Content pack to enable remediation owner information to be added to some issues automatically and automated remediation of some ASM issues. | [Deploy ASM and Exposure Management enrichment and remediation automation functionality](/cortex-xsiam/detect-investigate-and-respond-to-threats/attack-surface-management/deploy-asm-and-exposure-management-enrichment-and-remediation-automation.md) |
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/detect-investigate-and-respond-to-threats/exposure-management/get-started-with-exposure-management.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.