Skip to main content
Continuous Asset Discovery (CAD) automatically finds and monitors your external attack surface around the clock. Turn it on for a root domain or IP, and Odin discovers subdomains, open ports, running services, and linked infrastructure — keeping your asset inventory current as your environment changes. As your organisation grows, new subdomains, services, and infrastructure appear regularly. CAD picks these up automatically, so your security team always has a complete picture without coordinating across teams or manually importing every asset.

​
Scan schedule

CAD runs three scan tiers on a recurring basis: All scanning is non-intrusive. Newly discovered assets are automatically added to your Assets inventory and the Attack Surface Map.

​
Recon types

Domain Recon

DNS enumeration, HTTP probing, and TLS inspection on domains and subdomains. Identifies web servers, WAFs, certificates, and technologies in use.

Network Recon

Scans the full port range (65,535 ports) on IP addresses. Identifies open ports, running services, and version information. For certain services, Odin uses targeted probing to extract detailed configuration.

​
Recon results

Recon data is available on each asset’s detail page. Click any asset on the Assets page to view its results. For domains and subdomains, Domain Recon surfaces:
  • Web server: the detected web server (e.g. Cloudflare, Nginx)
  • TLS: protocol version and cipher details (e.g. TLS 1.3)
  • Certificate: certificate subject and issuer
  • WAF: detected web application firewall
  • IP: resolved IP address
  • HTTP status: response code and latency
  • DNS records: A, AAAA, CNAME, and other resolved records
Asset detail panel showing Domain Recon results for a subdomain, including web server, TLS, certificate, WAF, IP, HTTP status, and DNS records
For IPs, Network Recon shows open ports, detected services, and version information where available.

​
Turning monitoring on or off

Continuous monitoring is controlled for your whole organisation from the Continuous monitoring card under Billing → Credits. Admins can switch it on or off at any time:
  • On — CAD runs on your schedule and is billed at 4 credits per monitored asset per month, prorated daily.
  • Off — all scanning stops and no CAD credits are charged. Your discovered assets are preserved in your Assets inventory and Attack Surface Map; turning monitoring back on resumes it.
When monitoring is off, an asset’s detail panel shows CAD as Off rather than an editable toggle, since the organisation-level switch takes precedence.
CAD is billed from your plan’s credits. Visit Billing in the sidebar to review usage, or contact [email protected] to discuss your plan.