Core Impact vs Reconmap
Core Impact
coresecurity.comReconmap
reconmap.comSide by side
| Figure | Core Impact | Reconmap |
|---|---|---|
| Price from | $787.50/mo | Free |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | — |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 1 |
| Spec score · Penetration Testing Software | 8.2 (#10) | 7.5 (#23) |
| Automation | Rapid Penetration Tests are preconfigured sequences that automate common testing scenarios and include step-by-step guidance. | Users can automate security commands and schedule commands using cron expressions. |
| Deployment | Core Impact runs on Windows with an integrated SQL database on a physical or virtual system. | Deployment options include Docker Compose, Kubernetes, manual installation, and a hosted SaaS offering maintained by the project’s lead developers through Netfoe. |
| Integrations | Named integrations include Cobalt Strike, Metasploit, PowerShell Empire, Plextrac, and vulnerability scanners such as Fortra VM, Nessus, and Burp Suite. | Built-in integrations can push vulnerabilities to Jira or Azure DevOps and send event-driven HTTP notifications through webhooks. |
| Purpose | Core Impact is penetration testing software for safely uncovering and exploiting security weaknesses. | Reconmap is an open-source collaboration platform for InfoSec professionals to plan, execute, and document penetration test projects across assets and clients. |
Plans
Core Impact
- Core Impact Basic$9,450 a year
- Core Impact Pro$12,600 a year
- Core Impact EnterprisePriced on request
In their own words
Core Impact
Core Impact has no write-up on Specifiction yet; its figures are above.
Reconmap
Reconmap is a free, open-source collaboration platform for planning, conducting, and documenting penetration test projects across assets and clients. It supports multiple top-level organisations and includes project templates, task management, and client management. Vulnerability tracking and a templates database help organize findings, while users can automate security commands and schedule them with cron expressions. Reports can be generated in Word, Markdown, and Typst formats, with custom whitelabel reporting. Integrations can send vulnerabilities to Jira or Azure DevOps and deliver event-driven HTTP notifications through webhooks. Security features include SSO, OpenID and SAML user federation, two-factor authentication, email verification, and an audit log. A REST API with token authentication supports connections to external tools and scripts. Deployment options include Docker Compose, Kubernetes, manual installation, and hosted SaaS maintained by the project’s lead developers through Netfoe. The documentation positions Docker Compose for small teams and Kubernetes for production deployments and large teams; it also cautions that Compose is not designed for high availability or horizontal scaling out of the box.