External Attack Surface Management

What should you fix first? Introducing Findings View in ThingsRecon 6.3

Discover how to prioritize what matters across your supply chain and external attack surface.

Sabrina Pagnotta

Head of Marketing

January 22, 2026

January 22, 2026

When everything is flagged, nothing gets fixed.

That’s the reality for most security and risk teams dealing with large volumes of issues across a growing number of digital assets. Certificates, misconfigurations, exposed services, expired software components, all discovered across dozens or hundreds of different suppliers and external systems.

The problem is that most tools show you a long list of raw issues, which is often repetitive and is not really prioritized by impact.

In ThingsRecon 6.3, we’re changing that.

Introducing Findings View

The Findings View is a new way to work with risk data inside the ThingsRecon platform.

It consolidates, scores, and ranks the security issues discovered across your ecosystem so you can:

  • Stop scrolling through flat lists of duplicated issues
  • Understand which findings affect multiple parts of your environment
  • Get a clear view of what to fix now, what can wait, and what to monitor

This is how security teams move from data collection to confident decision-making.

Why we built it

Our Deep Discovery finds A LOT of things. Domains, scripts, APIs, IPs, certificates, supplier connections, mobiles apps... but you don’t need a list of things, you need intelligence that tells you where to start.

Now, repeated issues are grouped into a single finding, given a proprietary risk score, and displayed by priority.

This means you don’t just see what’s wrong. You know what matters.

How it works

1. Aggregation

ThingsRecon groups repeated issues together. For example, if 22 assets have the same weak TLS configuration, it’s shown as one finding, not 22.

2. Scoring

Each finding is evaluated with our proprietary scoring model. It factors in:

  • Frequency of occurrence  
  • Asset importance and exposure  
  • Potential business and security impact

3. Prioritization

Findings are ranked from highest to lowest risk and labeled with one of four priority actions:

  • Fix Now
  • Fix Soon
  • Monitor
  • Track

4. Actionability

You can filter by Thing type (e.g., applications, domains, certificates) to get a clear, organized view of findings broken down by priority.

Take an interactive tour of the Findings view

Future releases will introduce Smart and Power findings, based on additional advanced intelligence sources.

A new view, a new mindset

This feature is more than a UI upgrade. It reflects a shift in how we think about external risk:

  • Not all issues are equal. Prioritization needs to reflect context.
  • Repetition is not impact. One issue across 100 systems doesn’t mean 100 problems.
  • Remediation is a decision problem. The right data makes that decision easier.

Ready to try it?

If you’re already a ThingsRecon customer, the Findings View is now live in your instance.

If you’re not a customer yet, get in touch with our team and request a demo.

get a personalized demo
What’s connected to you right now?
Thank you! You are now susbribed to The Recon Log
Oops! Something went wrong while submitting the form.
ALL THINGS
CYBER
A ThingsRecon podcast
Real exposure.
Real stories.
Share on LinkedinShare on XShare on Facebook