ReConfirm
ReConfirm is a web and API platform for continuously mapping an organisation’s internet-facing assets and assessing external security risks.
What ReConfirm is
ReConfirm is a web and API platform for continuously mapping an organisation’s internet-facing assets and assessing external security risks. It can discover domains, cloud services, open ports, SaaS applications, and shadow IT, then scan for vulnerabilities and misconfigurations and assess their real-world exploitability. The service also monitors for leaked credentials and breached accounts, checks SPF, DKIM, and DMARC email settings, and flags look-alike domains that may enable phishing or brand abuse. It provides remediation guidance and reports for technical and executive audiences, including output for NIS2 and other compliance frameworks. ReConfirm describes scans, subdomains, and assets as unlimited and says its scanning is non-intrusive, without code injection or attempts to bypass authentication. The platform is hosted in an EU private cloud; the maker lists MFA, automatic updates, regular penetration testing, and GDPR compliance. Slack scan-progress notifications and Microsoft/Azure single sign-on are supported. ReConfirm is sold exclusively through MSPs and distributors, with a partner programme that includes onboarding, documentation, training, a portal, and technical support. Pricing is available on request.
Good
- Continuously refreshes risk information across the full attack surface.
- Finds assets including shadow IT and SaaS applications.
- Monitors leaked credentials and breached accounts.
- Includes output for NIS2 and other compliance frameworks.
- Supports Slack notifications and Microsoft/Azure single sign-on.
Watch out
- Pricing is available only on request.
- Delivered exclusively through MSPs and distributors.
- Targets the European mid-market.
Who it suits
ReConfirm is intended for European mid-market organisations, including those with 100–2,500 employees, that want ongoing visibility into external assets and risks. Purchasing is through MSPs and distributors rather than direct delivery.
Verdict
ReConfirm brings external asset discovery, vulnerability assessment, credential monitoring, and brand and email checks into one continuous service. Its partner-only delivery model and request-based pricing are important considerations for prospective customers.
The facts
Each one read from ReConfirm's own pages, with the date it was checked.
What it does
- Asset discovery
- The platform discovers internet-facing assets including domains, cloud services, open ports, SaaS applications, and shadow IT.checked 9 Oct 2026
- Brand and email security
- Features include look-alike domain detection and SPF, DKIM, and DMARC analysis.checked 9 Oct 2026
- Brand protection
- ReConfirm identifies look-alike domains and potential brand abuse that could support phishing campaigns.checked 9 Oct 2026
- Credential monitoring
- The platform monitors the dark web for leaked credentials and breached accounts.checked 9 Oct 2026
- Dark web monitoring
- ReConfirm monitors for data leaks and leaked credentials.checked 9 Oct 2026
- Delivery model
- ReConfirm is delivered exclusively through MSPs and distributors, with white-label and multi-tenant support for partners.checked 9 Oct 2026
- Email security
- Email security analysis evaluates SPF, DKIM, and DMARC configurations.checked 9 Oct 2026
- Hosting and security
- The platform is hosted in an EU private cloud and the maker lists MFA, automatic security updates, and regular penetration tests.checked 9 Oct 2026
- Integration
- The platform supports Slack scan-progress updates through a configurable Slack Hook URL.checked 9 Oct 2026
- Integrations
- Platform settings support Slack scan-progress notifications and Microsoft/Azure single sign-on.checked 9 Oct 2026
- Partner model and audience
- ReConfirm is delivered exclusively through MSPs and distributors and targets the European mid-market, including organisations with 100–2,500 employees.checked 9 Oct 2026
- Partner support
- The partner programme includes onboarding, a partner portal, documentation, training, and dedicated technical support.checked 9 Oct 2026
- Privacy
- ReConfirm says it complies with GDPR and identifies the service provider as ReConfirm B.V.checked 9 Oct 2026
- Product
- ReConfirm provides continuous external attack surface management by mapping internet-facing assets, assessing security risks, and giving remediation guidance.checked 9 Oct 2026
- Purpose
- ReConfirm continuously maps an organisation’s internet-facing assets and assesses their security posture.checked 9 Oct 2026
- Reporting
- Reports are designed for technical and executive audiences and include output for NIS2 and other compliance frameworks.checked 9 Oct 2026
- Scanning limits
- The product page states that scans, subdomains, and assets are unlimited; it also describes scanning as non-intrusive and says it does not inject code or attempt to bypass authentication.checked 9 Oct 2026
- Security and hosting
- ReConfirm says its platform is hosted in a private cloud in the European Union, uses MFA and automatic updates, and undergoes regular penetration testing.checked 9 Oct 2026
- Support
- The partner programme includes onboarding, a partner portal, documentation, training, and dedicated technical support.checked 9 Oct 2026
- Vulnerability scanning
- ReConfirm continuously scans for external vulnerabilities and misconfigurations and assesses their real-world exploitability.checked 9 Oct 2026
The company
- Headquarters
- Sliedrecht, Netherlandschecked 28 Sep 2026
Alternatives to ReConfirm
- 1

UpGuard
Free planAndroidiOSWebAPI8.2From $1,750 a month - 2
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 3

Detectify Surface Monitoring
Free planWebAPI6.9From €2,500 a year - 4
RiskRecon
Free planWebAPI6.9Free plan - 5

CyCognito Platform
AndroidiOSWebAPI6.8 - 6

ImmuniWeb
AndroidiOSWebAPI6.8From €595 a year
