Skip to content
SPECIFICTION
Get listed

Reconmap

reconmap.com

Free plan WebmacOSLinuxAPISelf-hosted
Visit reconmap.com
Spec score 7.5 #23 of 34 in Penetration Testing Software

What it is

Reconmap is a free, open-source collaboration platform for planning, conducting, and documenting penetration test projects across assets and clients. It supports multiple top-level organisations and includes project templates, task management, and client management. Vulnerability tracking and a templates database help organize findings, while users can automate security commands and schedule them with cron expressions. Reports can be generated in Word, Markdown, and Typst formats, with custom whitelabel reporting. Integrations can send vulnerabilities to Jira or Azure DevOps and deliver event-driven HTTP notifications through webhooks. Security features include SSO, OpenID and SAML user federation, two-factor authentication, email verification, and an audit log. A REST API with token authentication supports connections to external tools and scripts. Deployment options include Docker Compose, Kubernetes, manual installation, and hosted SaaS maintained by the project’s lead developers through Netfoe. The documentation positions Docker Compose for small teams and Kubernetes for production deployments and large teams; it also cautions that Compose is not designed for high availability or horizontal scaling out of the box.

Spec sheet

Purpose
Reconmap is an open-source collaboration platform for InfoSec professionals to plan, execute, and document penetration test projects across assets and clients.Read 7 Oct 2026 · reconmap.com
Deployment
Deployment options include Docker Compose, Kubernetes, manual installation, and a hosted SaaS offering maintained by the project’s lead developers through Netfoe.Read 7 Oct 2026 · reconmap.com
API
Reconmap provides a REST API and API token authentication for connecting external tools and scripts.Read 7 Oct 2026 · reconmap.com
Integrations
Built-in integrations can push vulnerabilities to Jira or Azure DevOps and send event-driven HTTP notifications through webhooks.Read 7 Oct 2026 · reconmap.com
Automation
Users can automate security commands and schedule commands using cron expressions.Read 7 Oct 2026 · reconmap.com
Deployment limitation
The documentation says Docker Compose is not designed for high availability or horizontal scaling out of the box.Read 7 Oct 2026 · reconmap.com
Project management
Features include project templates, task management, client management, and support for multiple top-level organisations.Read 7 Oct 2026 · reconmap.com
Reports
Reconmap supports report generation in Word, Markdown, and Typst formats, including custom whitelabel reporting.Read 7 Oct 2026 · reconmap.com
Security features
The feature list includes SSO and user federation with OpenID/SAML support, two-factor authentication, email verification, and an audit log.Read 7 Oct 2026 · reconmap.com
Support and community
The project describes its contributor team as small and invites people with ideas, coding or testing skills, or security expertise to contribute.Read 7 Oct 2026 · reconmap.com
Vulnerability management
The platform includes vulnerability tracking and a vulnerability templates database.Read 7 Oct 2026 · reconmap.com
Who it is for
The documentation describes Reconmap as a platform for InfoSec professionals and lists Docker Compose for small teams and Kubernetes for production deployments and large teams.Read 7 Oct 2026 · reconmap.com

Plans and prices

Free and open source Free Free and open source; no usage limits stated Read 7 Oct 2026 · reconmap.com

Every Reconmap plan and price →

Strong points and limits

Strong points

  • Free and open source with no usage limits stated
  • Tracks vulnerabilities and organizes project tasks
  • Generates Word, Markdown, and Typst reports
  • Offers Docker Compose, Kubernetes, and manual deployment

Limits

  • Docker Compose lacks high availability out of the box
  • Docker Compose lacks horizontal scaling out of the box
  • The project describes its contributor team as small

Who it suits

Reconmap is aimed at InfoSec professionals managing penetration test projects. Its deployment guidance distinguishes small teams using Docker Compose from large teams or production deployments using Kubernetes.

Verdict

Reconmap brings project coordination, vulnerability tracking, automation, reporting, and integrations into one platform. Its deployment choices are clearly stated, with a specific scaling limitation for Docker Compose.

Where Specifiction places it

Alternatives to ReconmapAll alternatives →