RECON — One Platform, One Attack Surface

RECON is a single platform that sees your organisation from every angle an attacker does: from the public internet, from inside your network, and from the heart of your identity infrastructure. Three assessments, one correlated attack surface, and board-ready scores your board can read.

One platform, not four tools

Most organisations stitch together an external scanner, an internal vulnerability tool, an Active Directory auditor and a reporting layer — four contracts, four consoles, four data silos. RECON unifies all of them. The external attack surface, the internal network and the identity layer are scanned by the same platform and correlated into a single picture, so an attack path is never lost at a product boundary.

The Three Sides of Your Attack Surface

An attacker does not respect the boundary between "external" and "internal". They move from an exposed web service to an internal host to Domain Admin. RECON assesses all three layers and correlates them, so you see the same path the attacker would.

Correlated into one picture

The three sides are not separate reports. Domain computers seen in Active Directory enrich the internal asset inventory with authoritative operating-system data; external exposure, internal findings and identity weaknesses converge into a single attack surface. The result is one view in which an attack path can be followed end to end — from an exposed service on the internet to a privileged identity in the domain.

The Scan Engine — From Discovery to Board-Ready, Automatically

Every assessment runs the same disciplined, multi-phase pipeline. Raw discovery becomes a validated, risk-scored, executive-ready output in a single automated pass — with no manual triage, and without the analyst hours a manual exercise would take.

The Pipeline, Running Live

Inside the RECON console, each stage of the pipeline reports as it completes — discovery, fingerprinting, exposure, correlation and scoring building the result in front of you, without an analyst driving each step by hand.

CVE Intelligence — Multi-Source, European-Native

A vulnerability missing from one database is often present in another. RECON queries multiple independent vulnerability sources in parallel, deduplicates and cross-references them, and enriches each finding with real-world exploitation signals — so coverage does not depend on any single feed.

RBVM v4 — One Score Your Board Understands

A critical CVE on a disconnected test box is not a crisis; a medium CVE on your payment gateway is. RBVM v4 weighs every finding by four factors and produces a single 0–10 risk score that is documented, reproducible and defensible — not an opaque vendor number.

How a 9.1 CVSS finding produces a 6.9 score

The same score renders in the console as a single gauge with its severity breakdown, so the board reads one number while the team keeps the detail behind it.

AI Analysis & Executive Reporting

RECON turns findings into decisions. An AI layer interprets the data, classifies the organisation against European regulation and produces reporting written for the people who sign off the budget — not only the security team.

Architecture & Security Principles

RECON is built to assess the most sensitive parts of your infrastructure without becoming a risk itself. Four principles are non-negotiable.

Why RECON — and What It Replaces

RECON consolidates what most organisations buy as three or four separate products into one correlated platform, billed per real device and delivered as European sovereign infrastructure.

Next steps