Inside the engine
From one company name to your entire attack surface
Recon Wave starts with your legal entity and works outward using advanced reconnaissance techniques — the companies you own, the domains and IP addresses behind them, and everything they expose to the internet. Then it starts again, wider.
Your legal entity
- Example Group Ltd.
No installation. No credentials. No internal access.
Corporate structure
- Example Cloud GmbH
- Acme Labs s.r.o.
- +7 more entities
Domains & IP addresses
- example.com
- api.example-cloud.de
- 203.0.113.0/24
Technologies, ports & CVEs
- api.example.comnginx 1.18.0 · CVE-2021-23017
- 203.0.113.1465,536 ports · 3 open
Risks & policy violations
- Exposed admin login
- PostgreSQL port openednew in past 2 days
- New domain corp.com found
- Alert sent to your team
Recon Wave continuously evaluates your dataset against your policies.
Nothing to configure, nothing to install. Recon Wave maps your entire attack surface automatically, so there is no setup effort and no risk on your side.
Platform capabilities
Detect everything. Expose nothing.
Discover external assets, monitor change, and prioritize risk. No agents or internal access required.
Asset Discovery
Discover the domains, IP addresses, applications, technologies, and more tied to your organization — with zero configuration.
Learn moreVulnerability Management
Flag potential CVE matches from technology fingerprints and prioritize review with CVSS and EPSS context.
Learn moreContinuous Monitoring
Track all changes in your infrastructure in a searchable event log built for investigation.
Learn morePolicies & Alerting
Turn internal policies into automated checks and alerts for policy violations.
Learn moreThird-Party Risk
Map third-party DNS dependencies and identify dangling CNAMEs that pose takeover risks.
Learn morePort Scanning
Scan all 65,536 TCP ports across your IP addresses to find publicly exposed services.
Learn more
See what Recon Wave finds for your organization.
Request a founder-led demo and watch the engine map your external attack surface from your company name.