head to head · open source

pentest-ai vs reconmap

pentest-ai has 1,685 GitHub stars, 314 forks, 2 open issues and last shipped 7 days ago. reconmap has 982 stars, 139 forks, 8 open issues and last shipped 2 days ago. pentest-ai leads on adoption by 72% (1,685 vs 982 stars). pentest-ai is written in Python under MIT; reconmap is written in JavaScript under Apache-2.0. pentest-ai has attracted 19% as many forks as stars, reconmap 14%. reconmap was the more recently maintained of the two, and both are self-hostable with no licence fee. The two share 3 topic tags (ai-security, bug-bounty, devsecops), so they are genuine substitutes rather than adjacent tools.

Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.

pentest-ai ★ 1.7K reconmap ★ 982 category AI & Machine Learning

← all 20902 open source comparisons

Side by side

pentest-ai reconmap
GitHub stars ★ 1.7K ★ 982
License MIT Apache-2.0
Written in Python JavaScript
Last push 2026-09-13 2026-09-18
Forks ⑂ 314 ⑂ 139
Self-hosting Yes Yes
Data ownership Your server Your server

pick pentest-ai if

  • You weight community size — 1.7K stars and counting
  • You want the MIT license terms
  • Your stack matches Python
  • You value the larger contributor base for long-term maintenance

full pentest-ai profile →

pick reconmap if

  • You want the reconmap feature set and don't need the biggest community
  • You prefer the Apache-2.0 license terms
  • Your stack matches JavaScript
  • You evaluated both and reconmap fits your workflow better

full reconmap profile →

About pentest-ai

Pentest AI is an open source Python project that connects an AI client or model to a penetration testing workflow. It belongs to the AI security and application security ecosystem, and it is distributed under the MIT license. The project is published as ptai on PyPI and can be used through MCP, the CLI, or CI.

read the full pentest-ai overview →

About reconmap

Reconmap is an open source, Apache 2.0 licensed vulnerability assessment and penetration testing platform that manages the entire engagement lifecycle — reconnaissance, execution and reporting — for penetration testers, InfoSec teams and managed security service providers.

read the full reconmap overview →

More in AI & Machine Learning

OpenClaw ★ 390K Hermes Agent ★ 247K Ollama ★ 181K Dify ★ 157K Open WebUI ★ 153K langchain ★ 147K

Related comparisons

strix vs shannon strix vs skillspector strix vs ifixai strix vs codex-security strix vs garak strix vs ai-infra-guard strix vs giskard-oss strix vs agentic-bug-hunter openclaw vs hermes-agent openclaw vs opencode openclaw vs n8n openclaw vs open-webui openclaw vs comfyui openclaw vs odysseus openclaw vs lobechat openclaw vs anythingllm openclaw vs ollama ollama vs llama-cpp ollama vs vllm ollama vs odysseus ollama vs gpt4all ollama vs llama-index ollama vs localai open-webui vs gpt4all

More AI Security & Privacy projects

Compare either of these against the rest of the AI Security & Privacy field.

pentest-ai vs strix pentest-ai vs shannon pentest-ai vs SkillSpector pentest-ai vs iFixAi pentest-ai vs codex-security pentest-ai vs garak pentest-ai vs AI-Infra-Guard pentest-ai vs giskard-oss pentest-ai vs Agentic-Bug-Hunter pentest-ai vs nono pentest-ai vs CyberStrike pentest-ai vs AiSOC

Frequently asked questions

Is pentest-ai or reconmap more popular?

pentest-ai has 1,685 GitHub stars and reconmap has 982. pentest-ai has the larger community by that measure.

Are pentest-ai and reconmap free?

Both are open source. pentest-ai is licensed under MIT and reconmap under Apache-2.0. Neither carries a licence fee.

What is the difference between pentest-ai and reconmap?

pentest-ai is written in Python and reconmap in JavaScript. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.

Which should I choose, pentest-ai or reconmap?

Choose pentest-ai if you want the larger community (1,685 stars) or its MIT licence terms. Choose reconmap if its feature set, stack or Apache-2.0 licence fits better. Both are self-hostable.