Monitor Your
Attack Surface
Recon Wave automatically discovers and monitors your exposed infrastructure. No installation or internal access required.
Continuously track changes across your public infrastructure - servers, IP addresses, domains, and applications - and detect risks early.
Recon Wave monitors more than 10,000,000 assets. Read our customer stories
Inside the engine
From one company name to your entire attack surface
Recon Wave starts with your legal entity and works outward using advanced reconnaissance techniques — the companies you own, the domains and IP addresses behind them, and everything they expose to the internet. Then it starts again, wider.
Your legal entity
- Example Group Ltd.
No installation. No credentials. No internal access.
Corporate structure
- Example Cloud GmbH
- Acme Labs s.r.o.
- +7 more entities
Domains & IP addresses
- example.com
- api.example-cloud.de
- 203.0.113.0/24
Technologies, ports & CVEs
- api.example.comnginx 1.18.0 · CVE-2021-23017
- 203.0.113.1465,536 ports · 3 open
Risks & policy violations
- Exposed admin login
- PostgreSQL port openednew in past 2 days
- New domain corp.com found
- Alert sent to your team
Recon Wave continuously evaluates your dataset against your policies.
Nothing to configure, nothing to install. Recon Wave maps your entire attack surface automatically, so there is no setup effort and no risk on your side.
Continuous visibility
External infrastructure monitoring
Maintain an always up-to-date, independent view of your internet-facing assets and the risks they expose.
- Agentless
- No installation, configuration, or internal access required.
- Instant
- See your discovered external infrastructure from day one.
- Visible
- View all your assets across multiple providers simultaneously.
- Continuous
- Track changes across your external infrastructure continuously.
- Safe
- Flag potential CVE matches with risk context for validation.
- Advanced
- Uncover even your most hidden assets across all your subsidiaries.
How?
We scan the internet so you can stay ahead
- Recon Wave scans the internet and correlates public data to discover your online assets, including infrastructure owned by subsidiaries.
- We continuously update our dataset and track each asset so your team can investigate relevant changes and suspicious activity.
- We scan selected infrastructure for potential vulnerabilities and misconfigurations that your team can validate.
Recon Wave Search
Explore our DNS dataset
- Subdomains
- List known subdomains of any domain
- Historical records
- See how records have changed over time
- Reverse search
- Find domains by IP address, TXT record, or name server
- DNS record types
- Explore A, AAAA, TXT, NS, and other DNS records
Platform capabilities
Detect everything. Expose nothing.
Discover external assets, monitor change, and prioritize risk. No agents or internal access required.
Asset Discovery
Discover the domains, IP addresses, applications, technologies, and more tied to your organization — with zero configuration.
Learn moreVulnerability Management
Flag potential CVE matches from technology fingerprints and prioritize review with CVSS and EPSS context.
Learn moreContinuous Monitoring
Track all changes in your infrastructure in a searchable event log built for investigation.
Learn morePolicies & Alerting
Turn internal policies into automated checks and alerts for policy violations.
Learn moreThird-Party Risk
Map third-party DNS dependencies and identify dangling CNAMEs that pose takeover risks.
Learn morePort Scanning
Scan all 65,536 TCP ports across your IP addresses to find publicly exposed services.
Learn more
Trusted by security teams
Customer stories
See your external attack surface clearly.
Request a founder-led demo to see the public infrastructure Recon Wave discovers for your organization.