Cyber Tokens and probe licenses
How you pay for RECON - Cyber Tokens for external scans, per-device licenses for internal scans with Scout. Prices, trial and limits.
- Updated October 12, 2026
- Verified on RECON v3.3.0
- 4 min read
- Watch 1:39
RECON has two separate payment models: Cyber Tokens for external scans of your domains, and per-device licenses for internal scans with the Scout probe. They never mix: internal scans use no tokens.
Overview
| What you scan | How you pay | Where you manage it |
|---|---|---|
| Internet-facing domains (external scan) | Cyber Tokens, per domain and per run | Orizon profile, Billing tab |
| Internal network with the Scout probe | Per-device license, per probe or per probe group, valid for 12 months | Orizon profile, Billing tab, Licenses section |
| Active Directory (through the probe) | No separate charge: it is part of the internal scan | - |
All prices on this page exclude VAT.
Why two models
An external scan works on one domain at a time, so you pay every time you run it. An internal network needs frequent checks, so with a license you pay for capacity (how many distinct devices) for a year and can rescan as often as you like at no extra cost.
How it works
Cyber Tokens for external scans
- 1 Cyber Token is worth EUR 1.
- End-user price: 90 tokens per domain. Scanning
meccanicaadda.itandaddaservizi.ituses 180 tokens. - Partner price: 50 tokens per domain. It applies to accounts with the partner role.
- Tokens are deducted when you create the scan. Every run is charged again: a new scan, a rescan or a scheduled scan.
- If you also ask to refresh the company data, the scan costs 10 extra tokens.
- If scan creation fails after the charge, your tokens are refunded.
- Welcome tokens: the first user of a company to sign up receives 270 tokens, enough for three single-domain scans. The gift is granted only once per company.
RECON bundles. A bundle is a one-time purchase of tokens. The price of each bundle is shown on the Billing tab of your Orizon profile.
| Bundle | Tokens | Domains at 90 tokens |
|---|---|---|
| Starter | 900 | 10 |
| Professional | 2,250 | 25 |
| Business | 4,500 | 50 |
| Enterprise | 9,000 | 100 |
Partner accounts see a dedicated price list in the Partner tab of the marketplace.
Pay-as-you-go. When your tokens run out you can keep going on pay-as-you-go at EUR 1 per token, that is EUR 90 per domain at the end-user price (partner accounts use 50 tokens per domain). You need a saved payment method; tokens used beyond your bundles are invoiced on the 1st of each month.
Per-device licenses for internal scans
- What counts. Each distinct device the probe has assessed in the last 90 days, inside the networks assigned to the probe. A device counts once: rescanning it uses no extra capacity.
- What does not count. Personal phones and tablets, decoys (honeypots), devices seen only with a virtual or randomized MAC address, devices outside the probe's networks, and devices that were only detected but never assessed. Desk VoIP phones do count.
- Per probe or per group. A license covers one probe; a group license (Pooled license) shares capacity across every probe in the group, and a device seen by two probes counts once. Prices are the same. When a probe joins a licensed group, its own license is suspended and its expiry date keeps running.
- Free trial. Each company gets one trial: 30 days, unlimited capacity, for a single probe. It starts when the first probe completes its first network discovery. Other probes need a license.
- Term. Each purchase lasts 12 months. Later purchases add capacity, but each keeps its own expiry date.
License price list (12 months, per probe or per group).
| Capacity | Public price | Partner price |
|---|---|---|
| 100 assets | EUR 1,400 | EUR 800 |
| 500 assets | EUR 5,600 | EUR 3,500 |
| 1,000 assets | EUR 9,800 | EUR 6,000 |
| Pay-as-you-go, per asset | EUR 16.80 | EUR 9.00 |
Above 1,000 assets the license is not self-service: RECON sends you to sales (Contact sales for unlimited).
Limits
- Over capacity. If your devices exceed the license capacity you have 30 days to extend it; after that new scans pause, while existing results stay viewable.
- Trial ended or license expired. The probe can no longer scan and its scans cannot be opened until you buy or renew a license.
- Shared users. Someone using a shared probe can scan only if the owner has shared the license with them.
- Out of tokens. If a scan needs more tokens than your balance and you have no saved payment method, RECON does not start it. The same happens while you have an overdue invoice, until you settle it.
Related concepts
Where to check balance, usage and invoices, and how to buy a bundle.
License over capacityMessages, causes and fixes when a license is no longer enough.
Target networks and licensesHow the probe's networks decide what counts toward the license.
Multiple probes and groupsSharing capacity with a group license.