◎
Attack-surface intelligence
Bring together subdomains, DNS, HTTP, ports/services, certificates, crawling, robots/sitemaps and content discovery into one investigation model.
V13.2.6 • BUILDING IN PUBLIC
Recon.
Think.
Validate.
ReconFlow is a methodology-driven security assessment orchestrator built to turn raw attack-surface data into prioritized, evidence-backed investigation paths.
13.2.6 current build
66+ regression checks
Read-only behavioral execution
reconflow / expert
LIVE ENGINE
$ reconflow ai --target example.com --profile expert
01 Mapping attack surface DONE
02 Modeling application state DONE
03 Ranking behavioral surfaces DONE
04 Comparing identity behavior READY
05 Building evidence chain READY
HIGH-VALUE LEAD
Authorization differential detected
Response behavior differs across captured identities. Validation gate required.
▌
01 / CAPABILITIES
More than recon.
A reasoning loop.
ReconFlow is designed to connect discovery, application understanding, behavioral signals and validation instead of treating them as isolated scans.
⌁
Web & API intelligence
Inventory endpoints and parameters, inspect API contracts, JavaScript signals, CORS, HTTP methods and security posture.
◈
Behavioral intelligence
Model application states, workflows, invariants and authorization relationships from authorized browser captures.
⇄
Differential analysis
Normalize dynamic values and compare authorization, cache and response differences to surface investigation leads.
◌
Evidence-first validation
Track findings through evidence, hypotheses, validation gates and review queues rather than promoting guesses to confirmed vulnerabilities.
✦
Adaptive planning
The reasoning layer prioritizes what to investigate next using application context, methodology coverage and assurance gaps.
02 / WORKFLOW
From surface to
signal.
A single loop for authorized security research.
01
Discover
Map the known and unknown surface.
02
Understand
Build an application and behavior model.
03
Prioritize
Use context and evidence to choose the next test.
04
Validate
Keep high-impact findings behind explicit evidence gates.
03 / SAFETY BY DESIGN
Built for authorized
security testing.
ReconFlow's automated behavioral execution is intentionally bounded. The system is designed to assist security researchers without turning candidate signals into uncontrolled exploit traffic.
✓ Read-only behavioral HTTP methods for automated replay
✓ Authorized browser/HAR inputs for authenticated analysis
✓ Credential and secret redaction in persisted state
✓ Human validation remains separate from candidate generation
RECONFLOW13.2.6
FINAL STABILITY AUDIT PASS
- Regression suite verified
- Import sweep verified
- CLI verified
- Scope enforcement hardened
- Secret-safety checks expanded
04 / COMING SOON
The next recon
starts here.
ReconFlow is being built for researchers who want less command chaining and more intelligent investigation.
Connect with the builder on LinkedIn or copy the project link.