External attack surface and threat signals are continously monitored