Skip to content
SPECIFICTION
Get listed

AttackForge vs Reconmap

AttackForge

attackforge.app

Reconmap

reconmap.com

Side by side

FigureAttackForgeReconmap
Price from$50/moFree
Free plan—Yes
Free trialYes—
Open source——
WebYesYes
macOS—Yes
LinuxYesYes
APIYesYes
Self-hostedYesYes
Plans published51
Spec score · Penetration Testing Software8.4 (#6)7.5 (#23)
APIThe Self-Service REST API has more than 150 endpoints and is documented using OpenAPI v3.Reconmap provides a REST API and API token authentication for connecting external tools and scripts.
IntegrationsNamed integrations include Jira, ServiceNow, Azure DevOps, Slack, Microsoft Teams, Power BI, Tableau, HackerOne and BugCrowd.Built-in integrations can push vulnerabilities to Jira or Azure DevOps and send event-driven HTTP notifications through webhooks.
PurposeAttackForge manages offensive security testing from planning and execution through reporting, remediation and retesting.Reconmap is an open-source collaboration platform for InfoSec professionals to plan, execute, and document penetration test projects across assets and clients.

Plans

AttackForge

  • Pro$50 a month
  • Team$150 a month
  • Consultancy$300 a month
  • SME$800 a month
  • EnterprisePriced on request

AttackForge pricing →

Reconmap

  • Free and open sourceFree

Reconmap pricing →

In their own words

AttackForge

AttackForge has no write-up on Specifiction yet; its figures are above.

Visit attackforge.app

Reconmap

Reconmap is a free, open-source collaboration platform for planning, conducting, and documenting penetration test projects across assets and clients. It supports multiple top-level organisations and includes project templates, task management, and client management. Vulnerability tracking and a templates database help organize findings, while users can automate security commands and schedule them with cron expressions. Reports can be generated in Word, Markdown, and Typst formats, with custom whitelabel reporting. Integrations can send vulnerabilities to Jira or Azure DevOps and deliver event-driven HTTP notifications through webhooks. Security features include SSO, OpenID and SAML user federation, two-factor authentication, email verification, and an audit log. A REST API with token authentication supports connections to external tools and scripts. Deployment options include Docker Compose, Kubernetes, manual installation, and hosted SaaS maintained by the project’s lead developers through Netfoe. The documentation positions Docker Compose for small teams and Kubernetes for production deployments and large teams; it also cautions that Compose is not designed for high availability or horizontal scaling out of the box.

Visit reconmap.com