# microsoft/AttackSurfaceAnalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

Repository: https://github.com/microsoft/AttackSurfaceAnalyzer
Canonical: https://ross.abutalabs.com/products/attacksurfaceanalyzer
Language: C#
License: MIT
License Family: permissive
Topics: security-tools, attack-surface
Last push: 2026-08-01T22:59:32+00:00

## Health v2 (maintenance only)
Score: 82/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 95, release rhythm 55, longevity 100
- inputs: {"age_days": 2757, "days_push": 32, "days_rel": 222, "gap_med": 88, "n_releases_24m": 6}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2950, forks 294 (observed 2026-08-28T04:07:31.937808+00:00)

## What it is
Attack Surface Analyzer is a Microsoft open-source security tool that scans an operating system's security configuration before and after software installation and diffs the results. It surfaces potential vulnerabilities and misconfigurations introduced by installers or system changes, with a CLI and a Blazor GUI.

## Use cases
- analyze attack surface changes after installing software
- audit security configuration changes on windows
- diff system state before and after an installer runs
- evaluate risk of third-party software installation
- find security misconfigurations introduced by elevated installs
- scan os security posture for it audit

## When to choose
- you need to compare system security configuration before and after software installation
- you are a DevOps engineer validating what your installer changes
- you are a security auditor assessing third-party software risk

## When to avoid
- you need continuous runtime intrusion detection rather than before/after diffing
- you need network-wide scanning rather than single-host analysis
- you need a lightweight agentless scanner on systems without .NET

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, vulnerability-scanning, monitoring
- domain: security, operating-systems
- platform: windows, cross-platform, cli, dotnet
- tags: attack-surface, security-audit, diff-analysis, system-hardening, microsoft, devops, linux, macos

## Member repositories
- microsoft/AttackSurfaceAnalyzer (main) score 82

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:31.937808+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:32:42.771453+00:00, confidence not recorded.
  - readme: https://github.com/microsoft/AttackSurfaceAnalyzer (fetched 2026-08-28T04:07:31.937808+00:00, sha 2924ef48cee2)
- Data as of 2026-08-30T08:39:29.467469+00:00.