Blog

The Recon Log

Fresh insights and real-world lessons on attack surface, third-party risk, and the things that matter.

Thank you! You are now susbribed to The Recon Log

Oops! Something went wrong while submitting the form.

Beyond CVSS: Introducing Digital Proximity™ for Smarter Risk Models

This security metric adds context to vulnerability management by showing how close each exposure sits to critical systems, data, and suppliers.

Stephane Konarkowski

Stephane Konarkowski

Chief Product Officer

read the article

EASM and MITRE ATT&CK: Mapping Recon Tactics to Discovery

Why visibility at the reconnaissance stage matters, and how to use it.

Sabrina Pagnotta

September 10, 2025

HTTP Header Hygiene: Technical Deep Dive

Hardening a web app isn’t just patching or TLS—tight HTTP header hygiene is an easy, overlooked way to reduce your attack surface.

Stephane Konarkowski

August 21, 2025

Beyond Connectivity: Turning Attack Surface Discovery into Proactive Defense

You’ve mapped external connections. Now what?

Stephane Konarkowski

Why Digital Connectivity Is Key to External Attack Surface Management

Attackers think in paths and connections, not inventories. Mapping digital connectivity gives you the context to stay ahead.

Stephane Konarkowski

Cybersecurity in the Boardroom: How to Talk Risk with Your Execs

Modern CISOs must bridge cybersecurity with business strategy. Align with the board by focusing the narrative on business impact over threats.

A Security Leader’s Takeaways from the 23andMe Cyber Incident

23andMe's 2023 breach offers key lessons in cybersecurity hygiene, regulatory collaboration, and trust. Here’s what CISOs can take away.

What the SEC Cybersecurity Disclosure Requirements Mean for Security Leaders

This guide covers SEC requirements, materiality, board reporting, and how ThingsRecon maps cyber risk across your digital supply chain.

How to Build Digital Resilience for DORA Compliance

DORA means proving digital resilience. We explain what it requires and how ThingsRecon gives you clear and actionable visibility.

NIS2 Compliance Starts with Supply Chain Security

Supply chain security is a core NIS2 requirement. Real-time visibility into third-party connections and infrastructure helps you stay ahead.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.