Tagged attack-surface-management