ThingsRecon
ThingsRecon: Continuous supplier exposure monitoring with business context and evidence-based reporting. Ranked #13 of 30 in Security Ratings Software by our editors (8.0/10); pricing: Pricing on request; best for supply-chain teams needing business context.
At a glance
- Editor score8.0 / 10
- PricingPricing on request
- Best forSupply-chain teams needing business context
- Free planNo
- Vendor monitoringYes
- Facts checked21 Sep 2026
Where it wins
- Maps suppliers to domains, IPs, APIs, applications, certificates, and systems
- Combines continuous monitoring with alerts, evidence, and risk scores
- Connects with major IT, procurement, GRC, analytics, and data platforms
Where it doesn't
- No free plan for smaller teams to evaluate independently
- Pricing is usage-based and requires a tailored sales conversation
- Web platform may not suit teams seeking other deployment options
Our verdict on ThingsRecon
ThingsRecon is a web-based cybersecurity platform for security, third-party risk, resilience, governance, and compliance teams. It focuses on organizations managing complex digital ecosystems or critical supply chains, including enterprises and managed security service providers. The platform discovers internet-facing domains, IPs, APIs, applications, certificates, and supplier connections, then maps those relationships to critical systems. Its scope covers both external attack-surface visibility and supplier risk, rather than treating vendor assessment as a separate workflow.
Pricing is usage-based and tailored to the number of domains and suppliers, monitoring frequency, reporting needs, and selected capabilities. There is no free plan, and the pricing model is contact sales. That approach fits larger programs with varied monitoring and reporting requirements, but it gives smaller teams less opportunity for self-serve evaluation. The published offering centers on continuous score refreshes, supplier exposure monitoring, cyber-hygiene findings with evidence, change alerts, Digital Proximity measurement, and audit-ready reporting. Risk frameworks referenced include NIS2, DORA, ISO 27001, and SEC.
Integration depth is a significant part of the platform's fit. ThingsRecon provides API and webhook access, plus native integrations with ServiceNow, Jira Service Management, Jira Software, BMC Remedy/Helix, Zendesk, Freshservice, RSA Archer, OneTrust, SAP Ariba, Coupa, Workday, Dynamics 365 Supply Chain Management, Microsoft Power BI, and Snowflake. AI-assisted contextual intelligence adds technical, business, financial, and geopolitical signals to the analysis. Choose ThingsRecon when supplier relationships, continuous exposure changes, and evidence-backed reporting need to connect with existing business systems. Teams wanting a small, narrowly focused tool with public self-serve pricing may prefer a simpler option.
Your product? Our editors can test ThingsRecon in depth and publish a review, labelled as paid · from $149/mo →
ThingsRecon pricing
ThingsRecon fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Vendor monitoring | Yes |
| Attack surface coverage | Full attack surface |
| Score refresh cadence | Continuous |
| Change alerts | Yes |
| Entity limit | Not verified |
| API access | Yes |
| Risk frameworks | NIS2, DORA, ISO 27001, SEC |
| Deployment | Cloud |
| Platforms | Web |
| Compliance & security | SOC 2, GDPR |
| Support | Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 14 integrations: ServiceNow, Jira Service Management, Jira Software, BMC Remedy/Helix, Zendesk, Freshservice … See all → |
| Pricing | Pricing on request (source) |
| Website | thingsrecon.com |
| Facts checked | 21 Sep 2026 |
ThingsRecon integrations
ThingsRecon lists 14 integrations on its own site.
- ServiceNow
- Jira Service Management
- Jira Software
- BMC Remedy/Helix
- Zendesk
- Freshservice
- RSA Archer
- OneTrust
- SAP Ariba
- Coupa
- Workday
- Dynamics 365 Supply Chain Management
- Microsoft Power BI
- Snowflake
See all ThingsRecon integrations →
Alternatives to ThingsRecon
- SecurityScorecard Third-Party Risk ManagementBroad third-party risk coverage with free self-monitoring and scalable paid tiers.9.4
- Bitsight Security RatingsA daily, externally focused view of cyber risk for enterprises and their vendors.9.2
- Recorded Future Third-Party RiskA threat-led platform for continuous vendor risk monitoring, ratings, alerts, and remediation.9.0
See all ThingsRecon alternatives →
Used ThingsRecon? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used ThingsRecon for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
ThingsRecon is listed in our Security Ratings Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/thingsrecon/"><img src="https://www.itechguides.com/best/badge/thingsrecon.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update