Question 1

What counts as an asset?

Accepted Answer

An asset is a domain or an IP address — each counts as one. Only the assets you put in scope count toward your limit; everything else we discover stays visible and documentable for free, because scope controls ongoing scanning, alerts, and the limit. CDN and rotating addresses we classify as dynamic don't consume your quota, and a public cloud storage bucket we monitor also uses one slot.

Question 2

What happens when I reach my asset limit?

Accepted Answer

Nothing breaks. Discovery never stops — newly found assets remain visible and documentable — but you can't move more of them in scope until you free a slot or upgrade. Upgrades apply immediately, and new organizations get a short onboarding grace on top of their limit. Users, teams and organizations are never metered — assets are the only thing we count.

Question 3

Is it safe to scan my systems?

Accepted Answer

Yes. We run non-intrusive reconnaissance. We map and fingerprint your assets and match them against known issues. We do not run exploits.

Question 4

How do I know which plan I need?

Accepted Answer

You usually don't know upfront — and that's expected. Plans differ only by capacity, so the only question is how many assets you'll keep in scope. Request a trial, let the scan map your attack surface, and the in-scope count at the end tells you your size.

Question 5

How does the trial work?

Accepted Answer

Trials are requested, not self-served — someone on our team reviews every trial request, usually within one business day, and you get an email as soon as your organization is ready. Nothing is scanned before that. The trial then runs for 14 days with the full product, no card on file and nothing charged.

Question 6

What happens to my data after the trial?

Accepted Answer

Nothing is deleted at once. For 30 days your organization is read-only — you can sign in, see your results and export them. For the next 30 days it is closed — the data is hidden but kept, and choosing a plan opens it again. After that it is scheduled for deletion. We email you before each step.

Question 7

Is there a free version?

Accepted Answer

Yes, as a separate product. Recon Essentials is free and runs on your own machine with Docker. It covers discovery and inventory. Vulnerability findings, cloud connectors and integrations are part of the hosted plans, with nothing to install or maintain.

Question 8

Do I need to install anything?

Accepted Answer

No. There are no agents and no code changes — everything works from the outside, the way an attacker sees you. Add a domain or connect a read-only cloud account, and results appear as the initial scan completes.

Question 9

How can I pay?

Accepted Answer

By card, monthly or yearly — yearly bills ten months instead of twelve, so two months are free — or by bank transfer with an invoice. Bank transfer is available on every plan, not just Enterprise.

Question 10

Can I switch plans later?

Accepted Answer

Yes. Upgrades apply immediately; downgrades take effect at the end of your current billing period.

Question 11

How can I cancel my subscription?

Accepted Answer

Cancel anytime from billing settings. Your plan stays active until the end of the current billing period — no lock-in.

Question 12

What if I need more than 500 assets in scope?

Accepted Answer

That's Enterprise — a custom asset limit and negotiated pricing shaped around your attack surface. Talk to us.

Question 13

Do you offer support?

Accepted Answer

Yes — email support on every plan, with no support tiers. Reach us anytime from the contact page.

Features	All plans
Discovery & monitoring
Continuous attack surface monitoring	Included
Subdomain, port, website, technology and certificate discovery	Included
Screenshot, DNS, WHOIS and geolocation evidence on every asset	Included
Scan windows and exclusion rules you control	Included
Cloud monitoring
Cloud connectors (AWS, GCP, Azure, Cloudflare)	Included
Shadow cloud detection, even without a connector	Included
Public bucket and exposed-resource detection	Included
Every asset tied back to its cloud resource, account and region	Included
SSL/TLS monitoring
Certificate inventory from live scans and CT logs	Included
Expiry tracking with traffic-light warnings	Included
Per-endpoint TLS grades with weak protocol and cipher flags	Included
Vulnerabilities
CVE matching with KEV and EPSS prioritization	Included
Misconfiguration checks — security headers, HTTPS redirects, directory listings	Included
Finding triage with on-demand re-check verification	Included
Governance & reporting
Audit-ready asset inventory with documented purpose	Included
Compliance and executive reports (ISO 27001, PCI DSS, DORA, BDDK, BİGR), scheduled or on demand	Included
CSV and PDF exports	Included
Integrations & API
In-app, email, Slack and Microsoft Teams notifications	Included
Jira, ServiceNow and GitHub Issues ticketing — push findings, sync assignees	Included
Full REST API with incremental sync	Included
Organization, team and user management
Unlimited users and teams	Included
Multiple organizations under one subscription	Included
Role-based access — admin, editor and read-only roles	Included
SAML single sign-on with Microsoft Entra ID or Okta, and SCIM user provisioning	Included
Asset and issue assignment with an "Assigned to me" queue	Included
Support & billing
Email support, with no support tiers	Included
Card or bank transfer billing, with invoices	Included

Every plan includes everything

Included in every plan

Frequently asked questions