ThingsRecon has been included in the ECSO Cyberhive Matrix 2026 under Cyber Threat Intelligence and placed in the European Leaders Area. Its Supply Chain Intelligence platform discovers hidden digital relationships between organisations and their third-party ecosystem by scanning from the outside in. It scores each finding using Digital Proximity, a patent-pending metric measuring how close a risk sits to an organisation's core systems. The platform is SOC 2 Type II certified, carries the Cybersecurity Made in Europe label, and supports EU regulatory frameworks NIS2 and DORA.
Amsterdam, The Netherlands, July 1, 2026 — ThingsRecon, the supply chain intelligence platform for continuous digital relationship discovery, has been named a European Leader in Cyber Threat Intelligence in the ECSO Cyberhive Matrix 2026, the independent annual evaluation of European cybersecurity solutions. The recognition places ThingsRecon's Supply Chain Intelligence platform among the strongest performers on the continent for both user experience and European readiness, the two pillars ECSO uses to assess where a solution stands in the market.
ThingsRecon is built and headquartered in Europe, with data hosted in the EU, designed to support NIS2 and DORA obligations, and certified SOC 2 Type II with the Cybersecurity Made in Europe label.
The platform received a final score of 4.45 out of 5, a user experience score of 4.64, a 9.6 out of 10 average user rating, and a 4.7 score on ease of deployment, all verified from open-source and Cyberhive platform data.
About the Evaluation
The Cyberhive Matrix is ECSO's annual independent assessment of European cybersecurity solutions, now in its second edition, launched in June 2026 during ECSO's 10-Year Anniversary event. ECSO, the European Cyber Security Organisation, is a Brussels-based non-profit federation whose mandate is to strengthen European cybersecurity and promote the visibility of European solutions. The methodology is transparent and was built with input from industry experts on the Cyberhive Task Force, with trustworthiness, replicability, and usability central to its design.
The 2026 edition spans across 12 categories that speak to core market functions. Under this approach, ThingsRecon's Supply Chain Intelligence was placed alongside ESET Threat Intelligence Service, Mercury by QuoIntelligence, and Taranis AI by the Austrian Institute of Technology.
Scoring is measured across two independent axes: User Experience and European Readiness. ThingsRecon scored 4.64 on User Experience and 4.25 on European Readiness, for a combined final score of 4.45.
What the Report Says About ThingsRecon
The Cyberhive Matrix 2026 describes ThingsRecon Supply Chain Intelligence as follows:
ThingsRecon's Supply Chain Intelligence Platform provides continuous visibility into the digital connections between your organisation and its third-party ecosystem, by reconstructing your external footprint from the outside in. It continuously discovers and maps supplier infrastructure, shared services, and hidden dependencies, including domains, APIs, certificates, web applications, and inherited third-party assets, revealing exposure that traditional vendor risk and point-in-time assessments miss. Each discovery is enriched with technical, business, and risk signals, including 100+ security hygiene indicators, financial and geopolitical context, and compliance-relevant data. Through a proprietary, patent-pending measure of Digital Proximity, ThingsRecon adds a new dimension to cyber risk: not just how severe a vulnerability is, but how close it is to your core systems, and how far it can propagate.
ECSO Cyberhive Matrix 2026, Cyber Threat Intelligence category profile.
European Readiness: Built for EU Requirements
ThingsRecon's European Readiness score reflects the platform's operational design. Data is hosted in the EU and the company is headquartered in the EU. The platform is designed to support third-party risk obligations under NIS2 and DORA, and carries a SOC 2 Type II certification with an available third-party audit report, as well as the Cybersecurity Made in Europe label.
For European organisations navigating third-party risk disclosures under NIS2 or DORA, these attributes are increasingly part of procurement criteria. An independent evaluation that covers them explicitly carries different weight than vendor-produced documentation.
What This Means for Security Teams
Supply chain attacks have consistently ranked among the most consequential breach vectors in European security incidents in recent years, from software dependencies to shared infrastructure inherited through supplier relationships. Traditional vendor risk management relies heavily on questionnaires and periodic assessments that, by design, cannot detect exposure that was never named in a vendor list.
ThingsRecon's approach starts from the outside: instead of asking organisations to enumerate their suppliers and then assess each one, the platform discovers digital relationships by scanning what is exposed on the internet and reconstructing how those connections reach the organisation's core systems. Digital Proximity, a patent-pending metric developed by co-founder Stephane Konarkowski, quantifies that structural closeness so security teams can prioritise by actual business impact rather than aggregate score.
Being named a European Leader in the ECSO Cyberhive Matrix 2026 is an important validation of the work we have put into building ThingsRecon for the European market specifically. This recognition reflects our continued commitment to giving security teams real visibility into their supply chain, and to doing so in a way that meets the compliance and sovereignty standards European organisations require. We are honored to be recognised alongside the strongest players in this category, and we remain focused on helping our customers stay ahead of an increasingly complex threat landscape.
Stephane Konarkowski, CPO and Co-Founder, ThingsRecon
Press contact
Sabrina Pagnotta, Head of Marketing, ThingsRecon
