- Home
- Penetration Testing Software
- Reconmap
Reconmap
What it is
Reconmap is a free and open-source collaboration platform for InfoSec professionals planning, executing, and documenting penetration test projects. It organizes work across assets, clients, and multiple top-level organisations, with project templates and task management. The platform includes vulnerability tracking and a vulnerability-template database, and it can automate security commands or schedule them with cron expressions. Reports can be generated in Word, Markdown, and Typst, with custom whitelabel reporting. Integrations can send vulnerabilities to Jira or Azure DevOps and deliver event-driven HTTP notifications through webhooks. Security features include SSO, OpenID and SAML user federation, two-factor authentication, email verification, and an audit log. A REST API with token authentication connects external tools and scripts. Deployment options include Docker Compose, Kubernetes, manual installation, and hosted SaaS maintained by the project’s lead developers through Netfoe. The documentation notes that Docker Compose is not designed for high availability or horizontal scaling out of the box.
For and against
For
- Project templates and task management
- Tracks vulnerabilities and includes a template database
- Generates Word, Markdown, and Typst reports
- Free and open source with no usage limits stated
Against
- Docker Compose is not designed for high availability out of the box
- Docker Compose is not designed for horizontal scaling out of the box
The verdict
Reconmap brings project coordination, vulnerability work, automation, and reporting into one platform. Its deployment choices include hosted SaaS, while teams considering Docker Compose should account for the stated availability and scaling limitation.
Who it suits
Reconmap is aimed at InfoSec professionals working on penetration test projects. Its documentation identifies Docker Compose for small teams and Kubernetes for production deployments and large teams.
Plans and prices
Free and open source
Free and open source; no usage limits stated
Read 7 Oct 2026 · reconmap.com
On the record
- API
- Reconmap provides a REST API and API token authentication for connecting external tools and scripts.reconmap.com · read 7 Oct 2026
- Automation
- Users can automate security commands and schedule commands using cron expressions.reconmap.com · read 7 Oct 2026
- Deployment
- Deployment options include Docker Compose, Kubernetes, manual installation, and a hosted SaaS offering maintained by the project’s lead developers through Netfoe.reconmap.com · read 7 Oct 2026
- Deployment limitation
- The documentation says Docker Compose is not designed for high availability or horizontal scaling out of the box.reconmap.com · read 7 Oct 2026
- Integrations
- Built-in integrations can push vulnerabilities to Jira or Azure DevOps and send event-driven HTTP notifications through webhooks.reconmap.com · read 7 Oct 2026
- Project management
- Features include project templates, task management, client management, and support for multiple top-level organisations.reconmap.com · read 7 Oct 2026
- Purpose
- Reconmap is an open-source collaboration platform for InfoSec professionals to plan, execute, and document penetration test projects across assets and clients.reconmap.com · read 7 Oct 2026
- Reports
- Reconmap supports report generation in Word, Markdown, and Typst formats, including custom whitelabel reporting.reconmap.com · read 7 Oct 2026
- Security features
- The feature list includes SSO and user federation with OpenID/SAML support, two-factor authentication, email verification, and an audit log.reconmap.com · read 7 Oct 2026
- Support and community
- The project describes its contributor team as small and invites people with ideas, coding or testing skills, or security expertise to contribute.reconmap.com · read 7 Oct 2026
- Vulnerability management
- The platform includes vulnerability tracking and a vulnerability templates database.reconmap.com · read 7 Oct 2026
- Who it is for
- The documentation describes Reconmap as a platform for InfoSec professionals and lists Docker Compose for small teams and Kubernetes for production deployments and large teams.reconmap.com · read 7 Oct 2026
