Freedom251 › Penetration Testing Software
Reconmap
What Reconmap is
Reconmap is an open-source collaboration platform for InfoSec professionals managing penetration test projects across assets and clients. It brings project templates, task and client management, and support for multiple top-level organisations into one workspace. Teams can track vulnerabilities with a template database, automate security commands, and schedule them with cron expressions. Reports can be generated in Word, Markdown, or Typst, with custom whitelabel reporting. Integrations can push vulnerabilities to Jira or Azure DevOps and send event-driven HTTP notifications through webhooks. Security options include SSO, OpenID and SAML user federation, two-factor authentication, email verification, and an audit log. A REST API and token authentication allow connections to external tools and scripts. Reconmap is available as a web app and supports Linux, macOS, API access, and self-hosting. Deployment options include Docker Compose, Kubernetes, manual installation, and hosted SaaS. The free and open-source plan is free.
Who it suits
Reconmap suits InfoSec professionals who need to coordinate penetration testing work and document findings. The documentation positions Docker Compose for small teams and Kubernetes for production deployments and larger teams.
What it does well
- Organizes projects, tasks, and client management.
- Tracks vulnerabilities and includes a templates database.
- Generates Word, Markdown, and Typst reports.
- Automates commands and supports cron scheduling.
- Free and open-source plan at no cost.
What to know first
- Docker Compose lacks high availability out of the box.
- Docker Compose lacks horizontal scaling out of the box.
- The project describes its contributor team as small.
Limits
The Free and open source plan is listed as free, with no usage limits stated. Docker Compose is not designed for high availability or horizontal scaling out of the box.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free and open source | Free and open source; no usage limits stated | Free |
As reconmap.com lists them, read 7 Oct 2026. The maker's own page has the final word.
Getting started
- Open reconmap.com to explore the product.
- Choose web use or a self-hosted deployment route.
- For self-hosting, choose Docker Compose, Kubernetes, or manual installation.
- Use Docker Compose for a small team, or Kubernetes for production deployments and large teams.
- Choose the hosted SaaS offering maintained by the project’s lead developers through Netfoe if you want a hosted deployment.
Verdict
Reconmap combines project coordination, vulnerability tracking, command automation, and reporting for penetration testing teams. Teams should account for the stated Docker Compose scaling limitation when choosing a deployment option.
Questions
How much does Reconmap cost?
The Free and open source plan is listed as free.
Is Reconmap open source?
Yes. Reconmap has a Free and open source plan.
Which platforms does Reconmap support?
The listed platforms are web, Linux, macOS, API, and self-hosted.
Can Reconmap connect to Jira or Azure DevOps?
Yes. Built-in integrations can push vulnerabilities to Jira or Azure DevOps. It can also send event-driven HTTP notifications through webhooks.
How can Reconmap be deployed?
Deployment options include Docker Compose, Kubernetes, manual installation, and hosted SaaS maintained by the project’s lead developers through Netfoe.
What limits apply to the free plan?
No usage limits are stated for the Free and open source plan. Docker Compose is not designed for high availability or horizontal scaling out of the box.
Facts from Reconmap's own pages
- API
- Reconmap provides a REST API and API token authentication for connecting external tools and scripts. · reconmap.com, 7 Oct 2026
- Automation
- Users can automate security commands and schedule commands using cron expressions. · reconmap.com, 7 Oct 2026
- Deployment
- Deployment options include Docker Compose, Kubernetes, manual installation, and a hosted SaaS offering maintained by the project’s lead developers through Netfoe. · reconmap.com, 7 Oct 2026
- Deployment limitation
- The documentation says Docker Compose is not designed for high availability or horizontal scaling out of the box. · reconmap.com, 7 Oct 2026
- Integrations
- Built-in integrations can push vulnerabilities to Jira or Azure DevOps and send event-driven HTTP notifications through webhooks. · reconmap.com, 7 Oct 2026
- Project management
- Features include project templates, task management, client management, and support for multiple top-level organisations. · reconmap.com, 7 Oct 2026
- Purpose
- Reconmap is an open-source collaboration platform for InfoSec professionals to plan, execute, and document penetration test projects across assets and clients. · reconmap.com, 7 Oct 2026
- Reports
- Reconmap supports report generation in Word, Markdown, and Typst formats, including custom whitelabel reporting. · reconmap.com, 7 Oct 2026
- Security features
- The feature list includes SSO and user federation with OpenID/SAML support, two-factor authentication, email verification, and an audit log. · reconmap.com, 7 Oct 2026
- Support and community
- The project describes its contributor team as small and invites people with ideas, coding or testing skills, or security expertise to contribute. · reconmap.com, 7 Oct 2026
- Vulnerability management
- The platform includes vulnerability tracking and a vulnerability templates database. · reconmap.com, 7 Oct 2026
- Who it is for
- The documentation describes Reconmap as a platform for InfoSec professionals and lists Docker Compose for small teams and Kubernetes for production deployments and large teams. · reconmap.com, 7 Oct 2026
Where Reconmap stands on Freedom251
- Penetration Testing Software#15 of 34