Create your first external scan

An external scan starts from a domain and shows what an attacker can see from the internet: subdomains, IP addresses, ports, technologies and vulnerabilities. In this guide you create the first mapping for Meccanica Adda's domain meccanicaadda.it and check the company data before you launch it.

Goal

Create an external scan with complete company data, so that besides the technical scan RECON also runs the analyses that depend on the company, such as NIS 2 classification and industry risk.

Prerequisites

• An Orizon account with access to RECON.
• The domain to analyse and, ideally, the company's VAT number.
• Enough Cyber Tokens or a saved payment method. Each domain costs 90 tokens at the end-user price and 50 tokens at the partner price (1 Cyber Token = EUR 1).

Steps

1. Open the creation dialog

   On the RECON dashboard click New Mapping. In the Configuration step stay on the Single Domain Scan tab and, under Target Selection, keep New External Target (Company/Group).

2. Choose what to analyse

   Attack Surface Mapping is always on and cannot be turned off. Leave Vulnerability Detection on (CVE lookup from 8 vulnerability databases) and click Next.

3. Enter domain, VAT number and country

   In the Domain & Country step type the domain, for example meccanicaadda.it. Choose VAT Number and enter the VAT number: searching by VAT number gives more accurate results than searching by Company Name. Select Italy as the country, then click Next: Find Company.

4. Pick the company

   In the Company Selection step RECON searches business databases and shows one card per match, with VAT number, address, industry, employees and revenue. At the bottom of each card, Data sums up what is available: Industry, Employees, Revenue and VAT, scored from 0 to 4. Pick the card that shows 4/4. If the company is not listed, use Enter Company Details Manually.

5. Check the data advisory

   In the Review & Create step, if data is missing you see the advisory Incomplete company data — some analyses will skip, listing the missing data and the analyses that will not run. Click Edit company data to go back to the selection and pick a complete card.

6. Review the cost and create the scan

   Check Save as External Target (on for new targets) so you can find the domain again in future scans. The Cyber Token Transaction box shows the cost and your balance after the operation. Optionally turn on Run company data enrichment after scan (10 extra tokens). Finally click Create Scan and wait for Mapping created successfully before closing the dialog.

Which analyses depend on company data

The technical scan (subdomains, ports, vulnerabilities, EPSS, KEV) always runs. Company analyses need specific data:

The advisory in the review step lists exactly which data is missing and which analyses are skipped for your scan.

Result

You see Mapping created successfully and the scan appears on the dashboard. You can open it straight away to follow its progress: the work continues on the server even if you close the page.

Troubleshooting

• Insufficient Cyber Tokens message: if your balance does not cover the cost and you have no payment method, creation stops. Buy a token bundle or add a payment method. With a saved payment method, the review tells you how many tokens will be billed.
• The company is not listed: check the VAT number and country again, or enter the details manually.
• Incomplete data advisory: the scan still runs, but the analyses named in the advisory are skipped. Pick a more complete card or fill in the missing data.

Related articles