Hey Product Hunt 👋 I'm Mr. Red, founder of Recon Pro. For years, I've been doing reconnaissance the way every pentester and bug bounty hunter does: bouncing between a subdomain finder here, a port scanner there, a certificate lookup somewhere else, then manually stitching the findings together before the actual assessment could even begin. Reconnaissance is supposed to be the fast part. Instead it was eating up a huge chunk of every engagement, and half of that time wasn't hunting for vulnerabilities. It was just gluing tools together and reformatting output. That got me thinking. If a single scan can already tell me everything about a target's subdomains, ports, and certificates, why am I still running it in four separate windows? So I built Recon Pro, a reconnaissance engine that puts a full attack-surface intake pipeline right in your terminal: Start with a target: Point it at a domain and Recon Pro runs subdomain enumeration, port scanning, TLS certificate analysis, and DNS reconnaissance in one unified pass, with rate-limiting smart enough to stay under WAF radar. Get evidence, not a black box: Every finding links back to what was actually discovered, so you're verifying real data instead of trusting an opaque verdict. Ship it straight into your pipeline: Results export to SARIF, JSON, CSV, or HTML, so findings drop directly into CI/CD, ticketing, or your report instead of living in scattered terminal scrollback. My goal is simple. Let security professionals spend their time hunting vulnerabilities instead of babysitting a dozen disconnected tools. Open Source & Audit-Ready 🔓 Zero external runtime dependencies, TLS enforced by default, sandboxed plugin SDK. 👉 What's the first target you'd point Recon Pro at? I'll be in the comments all day! 🚀

Recon Pro

Advanced Reconnaissance for Offensive Security

Advanced Reconnaissance for Offensive Security