Freedom251 › Security Ratings Software
ThingsRecon
What ThingsRecon is
ThingsRecon maps an organization’s external assets, suppliers, APIs, and digital dependencies so security teams can understand exposure and connections. Agentless discovery identifies domains, IPs, APIs, shadow applications, and supplier links. Continuous monitoring can alert teams to new assets, changed supplier risk, or issues that return after remediation. The platform evaluates more than 150 technical, business, financial, and geopolitical signals for each supplier. Its Digital Proximity measure indicates how closely a supplier connects to critical systems and is described as patent pending. Ask Steph lets users question live supply-chain data in plain language, including affected suppliers and incident blast radius. Listed integrations include ServiceNow, Jira, SAP Ariba, Coupa, RSA Archer, OneTrust, BMC Remedy/Helix, Zendesk, Freshservice, Workday, Dynamics 365, Power BI, and Snowflake. Connections can use dashboards, exports, API, webhooks, or native integrations. Paid plans are priced per domain or supplier and scale by usage and monitoring frequency. A free Proximity Snapshot reviews public assets and returns results in 48–72 hours.
Who it suits
It is designed for enterprises, managed security service providers, and organizations managing complex ecosystems or critical supply chains. Security teams can use it for attack-surface and supplier monitoring.
What it does well
- Agentless discovery covers external assets and suppliers
- Continuous alerts for changes and recurring issues
- Evaluates over 150 supplier signals
- Plain-language supply-chain questions with Ask Steph
- API and many business-system integrations
What to know first
- Pricing scales by domain or supplier
- Monitoring cost also varies with usage and frequency
- Free snapshot examines public external assets only
- Paid plans have no published prices
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Supply Chain Intelligence | priced per supplier · scales by usage and monitoring frequency | On request |
| Attack Surface Discovery | priced per domain · scales by usage and monitoring frequency | On request |
As thingsrecon.com lists them, read 3 Oct 2026. The maker's own page has the final word.
Verdict
ThingsRecon combines attack-surface discovery, supplier intelligence, monitoring, and integration options in web and API forms. Confirm usage-based pricing and whether its coverage matches your ecosystem before adopting it.
Facts from ThingsRecon's own pages
- AI assistant
- Ask Steph lets users ask plain-language questions about live supply-chain data and can surface affected suppliers and blast radius during incidents. · thingsrecon.com, 3 Oct 2026
- Digital Proximity
- Digital Proximity measures how closely each supplier is connected to an organization's critical systems, and the site describes it as patent pending. · thingsrecon.com, 3 Oct 2026
- Discovery
- Its agentless external discovery identifies domains, IPs, APIs, shadow applications, and supplier connections. · thingsrecon.com, 3 Oct 2026
- Free assessment
- A free Proximity Snapshot is offered; the page says it inspects public external assets only and results are delivered in 48–72 hours. · thingsrecon.com, 3 Oct 2026
- Headquarters
- Amsterdam, The Netherlands · thingsrecon.com, 28 Sept 2026
- Integration methods
- The pricing page says users can connect through dashboards, exports, or an API, and the homepage also mentions API, webhook, or native integrations. · thingsrecon.com, 3 Oct 2026
- Integrations
- Listed integrations include ServiceNow, Jira, SAP Ariba, Coupa, RSA Archer, OneTrust, BMC Remedy/Helix, Zendesk, Freshservice, Workday, Dynamics 365, Power BI, and Snowflake. · thingsrecon.com, 3 Oct 2026
- Intended customers
- ThingsRecon says it supports enterprises, managed security service providers, and organizations responsible for complex digital ecosystems and critical supply chains. · thingsrecon.com, 3 Oct 2026
- Limits
- The pricing page says Attack Surface Discovery is charged per domain and Supply Chain Discovery per supplier, with plans scaled to usage and monitoring frequency. · thingsrecon.com, 3 Oct 2026
- Monitoring
- Continuous monitoring can alert teams when new assets appear, supplier risk changes, or remediated issues recur. · thingsrecon.com, 3 Oct 2026
- Privacy
- ThingsRecon's privacy policy identifies ThingsRecon B.V. as the data controller under GDPR and lists its Amsterdam address. · thingsrecon.com, 3 Oct 2026
- Purpose
- ThingsRecon maps an organization's external assets, suppliers, APIs, and digital dependencies to help security teams understand exposure and connections. · thingsrecon.com, 3 Oct 2026
- Risk context
- The platform says it evaluates more than 150 signals per supplier across technical, business, financial, and geopolitical areas. · thingsrecon.com, 3 Oct 2026
- Security credentials
- The site displays an AICPA SOC 2 certification badge and Cybersecurity Made in Europe and ECSO Matrix badges. · thingsrecon.com, 3 Oct 2026
- Support
- The about page provides a contact-support option and identifies a Senior Technical Support Engineer on the team. · thingsrecon.com, 3 Oct 2026
Where ThingsRecon stands on Freedom251
- Security Ratings Software#21 of 30