ReconX v1.2

ReconX v1.2

Highlights

• Bring your own AI provider — works with any OpenAI-compatible API (OpenAI, DeepSeek, OpenRouter, Groq). Keys are encrypted per-user.
• AI chat tool-calling — the agent routes plain-English requests to the right security tool and explains the results (9 tools, all tested).
• New landing site — real screenshots, About & Features pages, download section, working footer links.
• Fully mobile-responsive — hamburger nav, stacked sections, chat sidebar drawer.
• Website ownership verification removed; graceful handling when crt.sh is unavailable.
• Cleaned-up README with tech badges + setup guide.

For authorized security testing only.

v1.1 — Website Ownership Verification

What's New in v1.1

Website Ownership Verification (closes #1)

Users must now verify they own a domain before scanning it — preventing misuse against third-party sites.

Two verification methods:

• Email OTP — send a 6-digit code to any @yourdomain.com address
• DNS TXT Record — add a reconx-verify=... TXT record in your registrar panel (Cloudflare, Namecheap, GoDaddy, Hostinger step-by-step guides included)

Scan Gate in AI Agent

The AI chat now blocks scan requests against unverified domains and prompts users to verify first.

Bug Fixes

• Fixed CORS issue (localhost IPv6 vs IPv4 mismatch)
• Fixed 500 errors for demo accounts on website verification endpoints
• Verified websites now load immediately on login (not only when opening Connectors)
• Replaced hardcoded gpt-4o with configurable OPENAI_MODEL env var
• Added proper LLM error handling (connect failures, timeouts, 401/429/500)
• Sidebar collapsed by default with profile circle visible

Free API Integrations

• Replaced XposedOrNot (Cloudflare-blocked) with LeakCheck.io
• Replaced Blocklist.de (timeout) with CleanTalk
• ThreatFox now uses optional THREATFOX_API_KEY

ReconX v1.0.0 — Initial Release

ReconX v1.0.0

• 15 security modules
• AI-powered reports
• Bug bounty ready
• 201 commits

[Watch the demo video below]