ThingsRecon

6.0easy start · #18 of 29
in Security Ratings Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on api, Web.

ThingsRecon is ranked #18 of 29 in security ratings software on The Geeks Club. It runs on API, Web. There is no free plan.

ThingsRecon plans and pricing

All plans

Supply Chain Intelligence Not published priced per supplier · scales by usage and monitoring frequency thingsrecon.com · 3 Oct 2026

Attack Surface Discovery Not published priced per domain · scales by usage and monitoring frequency thingsrecon.com · 3 Oct 2026

Compared on security ratings software

Free plan: No
Vendor monitoring: Yes
Attack surface coverage: full attack surface
Score refresh cadence: continuous
Change alerts: Yes
API access: Yes
Risk frameworks: NIS2, DORA, ISO 27001, SEC

Best ThingsRecon alternatives

See all 12

Cybersecurityratings.com 0 of 4 in the starter kit Lesson 17.6 RiskRecon 0 of 4 in the starter kit Lesson 27.5 SecurityScorecard Third-Party Risk Management 0 of 4 in the starter kit Lesson 37.5 ThreatWatch 0 of 4 in the starter kit Lesson 47.5 Bitdefender Total Security 0 of 4 in the starter kit Lesson 57.4 ThreatNG Security 0 of 4 in the starter kit Lesson 67.4

The record

Purpose: ThingsRecon maps an organization's external assets, suppliers, APIs, and digital dependencies to help security teams understand exposure and connections.
Discovery: Its agentless external discovery identifies domains, IPs, APIs, shadow applications, and supplier connections.
Digital Proximity: Digital Proximity measures how closely each supplier is connected to an organization's critical systems, and the site describes it as patent pending.
Monitoring: Continuous monitoring can alert teams when new assets appear, supplier risk changes, or remediated issues recur.
Risk context: The platform says it evaluates more than 150 signals per supplier across technical, business, financial, and geopolitical areas.
AI assistant: Ask Steph lets users ask plain-language questions about live supply-chain data and can surface affected suppliers and blast radius during incidents.
Integrations: Listed integrations include ServiceNow, Jira, SAP Ariba, Coupa, RSA Archer, OneTrust, BMC Remedy/Helix, Zendesk, Freshservice, Workday, Dynamics 365, Power BI, and Snowflake.
Integration methods: The pricing page says users can connect through dashboards, exports, or an API, and the homepage also mentions API, webhook, or native integrations.
Security credentials: The site displays an AICPA SOC 2 certification badge and Cybersecurity Made in Europe and ECSO Matrix badges.
Privacy: ThingsRecon's privacy policy identifies ThingsRecon B.V. as the data controller under GDPR and lists its Amsterdam address.
Free assessment: A free Proximity Snapshot is offered; the page says it inspects public external assets only and results are delivered in 48–72 hours.
Limits: The pricing page says Attack Surface Discovery is charged per domain and Supply Chain Discovery per supplier, with plans scaled to usage and monitoring frequency.
Intended customers: ThingsRecon says it supports enterprises, managed security service providers, and organizations responsible for complex digital ecosystems and critical supply chains.
Support: The about page provides a contact-support option and identifies a Senior Technical Support Engineer on the team.

Where it ranks on The Geeks Club

Best Security Ratings Software in 2026#18 of 29

Is ThingsRecon yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ThingsRecon

Sources

thingsrecon.com· checked 3 Oct 2026
thingsrecon.com/integrations· checked 3 Oct 2026
thingsrecon.com/pricing· checked 3 Oct 2026
thingsrecon.com/privacy-policy· checked 3 Oct 2026
thingsrecon.com/proximity-snapshot· checked 3 Oct 2026
thingsrecon.com/about-us· checked 3 Oct 2026