Find what a domain exposes that you didn't know was there.

A passive attack-surface map: subdomains from Certificate Transparency logs, DNS and registrar metadata, and registered typosquats. Built from public records only — no contact with the target beyond DNS. Where Scan grades a URL you have, Recon discovers the ones you don't.