Tech riderRev. 3 Oct 2026

ThingsRecon

Ch 186.3of 29 Security Ratings Software

1Runs onAPI, Web
2CostsNot stated by the maker
3Vendor monitoringYes
4Attack surface coveragefull attack surface
5Score refresh cadencecontinuous
6Change alertsYes
7API accessYes
8Risk frameworksNIS2, DORA, ISO 27001, SEC

7 lines stated Written from the maker's own pages: thingsrecon.com

Visit site Alternatives

Overview

ThingsRecon is ranked #18 of 29 in security ratings software on Specifiction. It runs on API, Web. There is no free plan.

ThingsRecon plans and pricing

All plans

Supply Chain Intelligence Not published priced per supplier · scales by usage and monitoring frequency thingsrecon.com · 3 Oct 2026

Attack Surface Discovery Not published priced per domain · scales by usage and monitoring frequency thingsrecon.com · 3 Oct 2026

Compared on security ratings software

Free plan: Nothingsrecon.com
Vendor monitoring: Yesthingsrecon.com
Attack surface coverage: full attack surfacethingsrecon.com
Score refresh cadence: continuousthingsrecon.com
Change alerts: Yesthingsrecon.com
API access: Yesthingsrecon.com
Risk frameworks: NIS2, DORA, ISO 27001, SECthingsrecon.com

Facts

Purpose: ThingsRecon maps an organization's external assets, suppliers, APIs, and digital dependencies to help security teams understand exposure and connections.thingsrecon.com · 3 Oct 2026
Discovery: Its agentless external discovery identifies domains, IPs, APIs, shadow applications, and supplier connections.thingsrecon.com · 3 Oct 2026
Digital Proximity: Digital Proximity measures how closely each supplier is connected to an organization's critical systems, and the site describes it as patent pending.thingsrecon.com · 3 Oct 2026
Monitoring: Continuous monitoring can alert teams when new assets appear, supplier risk changes, or remediated issues recur.thingsrecon.com · 3 Oct 2026
Risk context: The platform says it evaluates more than 150 signals per supplier across technical, business, financial, and geopolitical areas.thingsrecon.com · 3 Oct 2026
AI assistant: Ask Steph lets users ask plain-language questions about live supply-chain data and can surface affected suppliers and blast radius during incidents.thingsrecon.com · 3 Oct 2026
Integrations: Listed integrations include ServiceNow, Jira, SAP Ariba, Coupa, RSA Archer, OneTrust, BMC Remedy/Helix, Zendesk, Freshservice, Workday, Dynamics 365, Power BI, and Snowflake.thingsrecon.com · 3 Oct 2026
Integration methods: The pricing page says users can connect through dashboards, exports, or an API, and the homepage also mentions API, webhook, or native integrations.thingsrecon.com · 3 Oct 2026
Security credentials: The site displays an AICPA SOC 2 certification badge and Cybersecurity Made in Europe and ECSO Matrix badges.thingsrecon.com · 3 Oct 2026
Privacy: ThingsRecon's privacy policy identifies ThingsRecon B.V. as the data controller under GDPR and lists its Amsterdam address.thingsrecon.com · 3 Oct 2026
Free assessment: A free Proximity Snapshot is offered; the page says it inspects public external assets only and results are delivered in 48–72 hours.thingsrecon.com · 3 Oct 2026
Limits: The pricing page says Attack Surface Discovery is charged per domain and Supply Chain Discovery per supplier, with plans scaled to usage and monitoring frequency.thingsrecon.com · 3 Oct 2026
Intended customers: ThingsRecon says it supports enterprises, managed security service providers, and organizations responsible for complex digital ecosystems and critical supply chains.thingsrecon.com · 3 Oct 2026
Support: The about page provides a contact-support option and identifies a Senior Technical Support Engineer on the team.thingsrecon.com · 3 Oct 2026