Recon goes multiplayer: shared inventory, shared alerts

Organisation inventory

Your vendors and products now live in Inventory, and admins can share them across your whole organisation. Everyone on your team sees the same shared inventory and can use it in Smart Alerts, while only organisation admins can add to it. Build the picture of what you run once, and your whole team works from it — no more everyone maintaining their own separate list. Your existing setup moves into your personal inventory automatically, so nothing changes by default.

Labels: business context on your inventory

An inventory tells you what you run; labels tell you what it means to your business. You can now label the vendors and products you monitor with the context that matters — which internal group owns something, whether it's part of your supply chain, however you think about your estate. Those labels surface when an alert comes through, so you see not just what fired but why it matters, and you can filter Smart Alerts by label too. This is the first step in bringing business and supplier context into Recon, with more sophistication landing in the coming weeks.

Shared Smart Alerts

Alert rules are no longer only personal. Admins can create an organisation rule that everyone on the team can see and be included on — so you don't end up with three people quietly maintaining three slightly different versions of the same alert.

Alert routing

Now that alerts can be shared, you control where they go. Route alerts so the right people get the right signals, instead of everything landing on everyone.

Webhooks

Push Recon alerts straight into the systems you already work in. If your workflow lives in a SIEM, a ticketing tool, or a chat channel, alerts can now arrive there instead of waiting in your inbox.

Ransomware in breach monitoring

Breach monitoring now includes dedicated ransomware sources. Ransomware activity against the suppliers and keywords you track surfaces alongside breach chatter, in the same feed.