ThingsRecon

ThingsRecon, founded in 2022 and based in Amsterdam, Netherlands, sells an external attack surface management (EASM) and supply-chain intelligence platform. Starting from a single domain, it performs agentless, outside-in scanning to discover an organization’s known and unknown internet-facing assets, then extends that discovery to map first-, third- and fourth-party supplier infrastructure so security teams can see dependencies and exposure that don’t appear on any official vendor inventory.

The platform’s stated differentiator is “Digital Proximity” (patent pending), a methodology that scores suppliers and assets by how topologically close they sit to an organization’s critical systems rather than by a generic risk letter grade alone. The company’s argument is that a moderately-rated vendor sitting close to core infrastructure is a bigger practical risk than a poorly-rated vendor with no real path in. The platform also layers on continuous drift monitoring (new subdomains, expiring certificates, newly vulnerable components) and a natural-language query interface over the discovery data.

ThingsRecon is a small company — public company trackers put headcount around 11-50 employees — and has not disclosed a funding round to date. It lists named enterprise and public-sector customers including Northumbria Healthcare NHS Foundation Trust and An Post (the Irish postal service), with named executives quoted on the company’s own site describing use for supplier discovery and remediation prioritization; these are vendor-published testimonials rather than independently verified case studies.