Frequently asked questions
No. ThingsRecon performs discovery externally and does not require software agents to be installed across the organisation or its suppliers. The platform analyses publicly observable technical signals and conducts non-intrusive scanning from outside the environment, which reduces deployment effort and avoids depending on each supplier to participate. Agentless discovery is especially useful for unknown, unmanaged or third-party assets where the organisation may not have administrative access. It does not remove the value of internal telemetry, asset management or endpoint tools; those sources can provide additional context. ThingsRecon’s role is to show what is visible and connected from an external perspective, attach evidence to the findings and monitor the surface as it changes. In practice, teams should record the supporting evidence, confirm ownership and business criticality, and connect the finding to an accountable workflow. This prevents a useful observation from becoming another isolated score or dashboard alert.
You pay per domain for Attack Surface Asset Discovery and per supplier for Supply Chain Discovery. Plans scale based on your actual usage and monitoring frequency.
ThingsRecon is a cybersecurity platform that maps your external attack surface, across your own assets and your supply chain. We show you what attackers see, so you can fix what matters most.
We scan the public internet like an attacker would: continuously, without agents or integrations, to uncover exposed assets, misconfigurations, and vulnerable third-party connections.
Yes. We support security and compliance leaders working toward NIS2, DORA, and SEC compliance by delivering real-time visibility and third-party risk insights aligned to key requirements.
Yes. We support custom reporting, co-branded outreach, and joint value delivery. We have flexible plans designed for MSSPs and service providers.
Absolutely. Use our dashboards, exports, or API to enrich your existing SIEM, vulnerability management, GRC platform, or risk monitoring programs with external discovery.