new tool for auditing external attack surfaces