Announcements
CyberLogs #1: Find. Deceive. Defend.
Join us on 20 October 2026 in Prague for talks on AI cybersecurity research, LLM honeypots, and protecting open source, followed by beer and chlebíčky.
Lukas Forst
Read article
Recon Wave blog
Security and reconnaissance
Practical research, product updates, and security insights from the Recon Wave team.
Latest articles
Technology
Global DNS State, part 2 - DNS Centralization
See how DNS services are concentrated across 320 million root domains, which providers dominate, and what that concentration means for resilience.
Martin Repa
Technology
Global DNS State, part 1 - The Alarming Prevalence of Zone Transfers
Explore an internet-wide scan of 4 million nameservers, including how often AXFR zone transfers were publicly exposed and which domains were affected.
Martin Repa
Technology
Storing RSA private keys in DNS TXT records?
Storing RSA private keys in DNS? That must be a leak, software error, or misconfiguration—right?
Martin Repa
Announcements
Announcing Recon Wave Search
Happy to announce Recon Wave Search - a web interface that unlocks the power of our DNS dataset with more than 10 billion DNS records.
Martin Repa
Security
Enumerating DNS zones using NSEC
Let us revisit the often-forgotten technique of DNS zone enumeration with NSEC records.
Martin Repa
Announcements
Hello World
Meet Recon Wave, an external infrastructure monitoring platform built to help security teams discover exposed assets and detect risks early.
Lukas Forst