head to head · open source
pentest-ai vs reconmap
pentest-ai has 1,799 GitHub stars, 329 forks, 2 open issues and last shipped 2 days ago. reconmap has 1,002 stars, 148 forks, 8 open issues and last shipped 3 days ago. pentest-ai leads on adoption by 80% (1,799 vs 1,002 stars). pentest-ai is written in Python under MIT; reconmap is written in TypeScript under MIT. pentest-ai has attracted 18% as many forks as stars, reconmap 15%. pentest-ai was the more recently maintained of the two, and both are self-hostable with no licence fee. The two share 3 topic tags (ai-security, bug-bounty, devsecops), so they are genuine substitutes rather than adjacent tools.
Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.
← all 20902 open source comparisons
Side by side
| pentest-ai | reconmap | |
|---|---|---|
| GitHub stars | ★ 1.8K | ★ 1.0K |
| License | MIT | MIT |
| Written in | Python | TypeScript |
| Last push | 2026-11-03 | 2026-11-02 |
| Forks | ⑂ 329 | ⑂ 148 |
| Self-hosting | Yes | Yes |
| Data ownership | Your server | Your server |
pick pentest-ai if
- You weight community size — 1.8K stars and counting
- You want the MIT license terms
- Your stack matches Python
- You value the larger contributor base for long-term maintenance
pick reconmap if
- You want the reconmap feature set and don't need the biggest community
- You prefer the MIT license terms
- Your stack matches TypeScript
- You evaluated both and reconmap fits your workflow better
About pentest-ai
Website · Quick start · Verification · Documentation · Issues Pentest AI connects an AI client or model to a penetration testing workflow. It investigates applications, records findings, and uses machine oracles to check whether an exploit can be reproduced . Verified findings carry evidence you can replay. Use it through MCP , from the CLI , or in CI . The model helps drive the investigation; an oracle determines whether a finding earns a verified verdict. Test only systems you own or have explicit authorization to assess. Read the acceptable use policy and terms before running an engagement. Quick start…
read the full pentest-ai overview →
About reconmap
Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to efficiently plan, execute, and report on security assessments. By streamlining workflows and promoting collaboration, Reconmap helps reduce the time from initial reconnaissance to final reporting — delivering faster, more organised results without compromising quality. Capabilities Execute security commands instantly or…
read the full reconmap overview →
More in AI & Machine Learning
Related comparisons
More AI Security & Privacy projects
Compare either of these against the rest of the AI Security & Privacy field.
Frequently asked questions
Is pentest-ai or reconmap more popular?
pentest-ai has 1,799 GitHub stars and reconmap has 1,002. pentest-ai has the larger community by that measure.
Are pentest-ai and reconmap free?
Both are open source. pentest-ai is licensed under MIT and reconmap under MIT. Neither carries a licence fee.
What is the difference between pentest-ai and reconmap?
pentest-ai is written in Python and reconmap in TypeScript. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.
Which should I choose, pentest-ai or reconmap?
Choose pentest-ai if you want the larger community (1,799 stars) or its MIT licence terms. Choose reconmap if its feature set, stack or MIT licence fits better. Both are self-hostable.