vulmon/recon-essentials repository overview

⁠Vulmon Recon Essentials

Free, self-hosted reconnaissance and monitoring for your external attack surface. Recon Essentials is the discovery and inventory part of Vulmon Recon⁠, packaged to run on your own machine with Docker. You add the domains and IP ranges you own. It then keeps discovering what is exposed (subdomains, IPs, open ports, websites, technologies, certificates) and shows changes as they happen.

Everything it finds stays in a PostgreSQL database on your machine. It never uploads your assets.

This image is the web console. It runs together with the engine image, vulmon/recon-essentials-engine⁠, and a PostgreSQL database. Do not start it on its own. Use the installer below.

⁠Install

curl -fsSL https://raw.githubusercontent.com/kontratek/recon-essentials/main/install.sh | bash

The script creates a recon-essentials folder in the current directory, generates the database password, asks for the address people will open in the browser, pulls the images and starts everything. Then open http://<your-address>:8080/setup and create the first administrator.

Requirements: Docker Engine 24+ with Docker Compose v2 (a Linux server, or Docker Desktop on macOS or Windows), 2 CPU cores, 4 GB RAM and 10 GB disk to start with.

⁠Versions

Every release is one tested pair of images: this web image and the engine image carry the same version number. In the installation, .env names the release in one line, RECON_VERSION, and both images take that number. Always use the same version for both images, for example 1.0.0.

Images are available for linux/amd64 and linux/arm64.

⁠Limits

Registering is optional. It takes an email address and an activation code, in the app under Settings → License.

⁠The hosted product

Vulmon Recon⁠, the hosted product, adds a managed service and vulnerability intelligence: vulnerability findings with CVE matching, cloud connectors, integrations, the public API and single sign-on.

⁠Documentation and support

• Product page: https://recon.vulmon.com/essentials⁠
• Installation files and README: https://github.com/kontratek/recon-essentials⁠
• Documentation: https://recon.vulmon.com/docs/essentials⁠
• Every outbound connection, and why it is made: https://recon.vulmon.com/docs/essentials/network⁠
• Questions and problems: https://github.com/kontratek/recon-essentials/issues⁠

Recon Essentials is not open source. Its use is governed by the Terms of Service⁠ and the Privacy Policy⁠.