ThingsRecon Blog

10 Questions and Metrics for CISOs to Track Exposure & Supply-Chain Risk

A practical question set to pressure-test external attack surface and vendor risk programs, with outcomes, metrics, and board-ready evidence

EASM and MITRE ATT&CK: Mapping Recon Tactics to Discovery

Why visibility at the reconnaissance stage matters, and how to use it.

Enterprises Face Over 800,000 High-Severity Cyber Hygiene Failures

ThingsRecon, a leader in attack surface discovery, releases its first industry study on enterprise digital hygiene in attack surface and supply chains

HTTP Header Hygiene: Technical Deep Dive

Hardening a web app isn’t just patching or TLS—tight HTTP header hygiene is an easy, overlooked way to reduce your attack surface.