A global retailer has grown through acquisitions and now suspects it has unknown internet-facing assets (forgotten domains, exposed IPs, and unmanaged web apps) that are not tracked in any Azure subscription. Security leadership wants a solution that continuously discovers and inventories these external, internet-exposed assets from an attacker's perspective — including resources hosted outside Azure — and surfaces their risks. Which solution should you recommend?