Recon

Recon (reconnaissance) is the first thing a real attacker does, and it is where a lot of breaches start: with an asset nobody remembered was there.

We map everything your organisation exposes to the internet (domains, subdomains, hosts, open services, exposed panels, forgotten staging environments and shadow IT), then turn it into a clear inventory of your real attack surface.

What you get

• A complete inventory of your public-facing assets, known and unknown
• Exposed services, technologies and versions, with the risky ones flagged
• Forgotten and shadow assets: old subdomains, staging, dev panels, stray VPNs
• A prioritised shortlist of what to review, decommission or test next

Recon works well on its own as a first step, and as the scoping stage before a focused pentest or ongoing AI vulnerability scanning.