This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Reconmap

Free#28 of 34 in Penetration Testing Software

Reconmap: A free, open-source hub for coordinating pentest projects, findings, evidence, and reports. Ranked #28 of 34 in Penetration Testing Software by our editors (6.4/10); pricing: Free plan; best for free open-source pentest coordination.

6.4/10Editor score

Visit Reconmap

Reconmap6.4 Visit Reconmap

At a glance

Editor score
6.4 / 10
Pricing
Free plan
Best for
Free open-source pentest coordination
Free plan
Yes
Paid from
Free
Deployment
Hybrid
Facts checked
20 Sep 2026

Where it wins
- Free, open-source core with self-hosted deployment options
- Automates security commands and supports scheduled tasks
- Tracks findings, evidence, attachments, and customizable reports
Where it doesn't
- Self-hosting requires Docker Compose, Kubernetes, or manual installation
- The hosted SaaS option is provided separately by Netfoe
- Its documented focus is web and network testing workflows

Our verdict on Reconmap

Reconmap is an open-source collaboration platform for information-security professionals who plan, execute, and document penetration tests. It brings project and client management, vulnerability tracking, evidence attachments, reporting, and security-command automation into one workspace. Teams working across multiple assets and clients can use it to organize engagements, manage findings, and produce reports from a shared system. The free, open-source core and self-hosted deployment model make it a practical fit for organizations that want control over their pentest coordination environment.

Its strongest area is the connection between test execution and engagement management. Reconmap supports automated and scheduled commands, web and network testing workflows, finding tracking, customizable report templates, attachments for projects, vulnerabilities, and tasks, audit logging, and analytics. Integrations include Jira, Azure DevOps, webhooks, Nmap, Semgrep, Snyk, Trivy, Subfinder, Syft, Testssl.sh, Bandit, gosec, Shcheck, and Generic LLM. REST API access, API-token authentication, SSO/SAML, and two-factor authentication add useful options for connecting the platform with existing security and delivery processes.

Deployment flexibility is a clear consideration. Reconmap can run through Docker Compose, Kubernetes, or manual installation, so teams should expect infrastructure and maintenance responsibilities when choosing self-hosting. A hosted SaaS option is offered separately by Netfoe. Reconmap is a strong choice for teams seeking free, open-source coordination across penetration-test projects, commands, findings, evidence, and reporting. Organizations looking primarily for a specialized API or mobile testing workflow should compare alternatives focused on those areas.

Your product? Our editors can test Reconmap in depth and publish a review, labelled as paid · from $149/mo →

Reconmap pricing

Plans Free planFree Free to use — no paid tier required for the core job.

See plans on reconmap.com

Reconmap fact sheet

Free plan	Yes
Paid from	Free
Deployment	Hybrid
Web app testing	Yes
API testing	Not verified
Network testing	Yes
Mobile testing	Not verified
Finding management	Yes
Evidence capture	Yes
Deployment	Cloud, Self-hosted
Platforms	Web
Compliance & security	SSO/SAML, 2FA
Support	Docs
Built for	Small business, Mid-market, Enterprise (editorial estimate)
Integrations	14 integrations: Jira, Azure DevOps, Webhooks, Bandit, Generic LLM, Go Security Checker (gosec) … See all →
Pricing	Free plan
Website	reconmap.com
Facts checked	20 Sep 2026

Reconmap integrations

Reconmap lists 14 integrations on its own site.

Jira
Azure DevOps
Webhooks
Bandit
Generic LLM
Go Security Checker (gosec)
Nmap
Semgrep
Shcheck
Snyk
Subfinder
Syft
Testssl.sh
Trivy

See all Reconmap integrations →

Alternatives to Reconmap

See all Reconmap alternatives →

Used Reconmap? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Reconmap for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used Reconmap myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Reconmap is listed in our Penetration Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/reconmap/"><img src="https://www.itechguides.com/best/badge/reconmap.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update