External Attack Surface Guide: Maximize protection, minimize costs