# pwnflow

> Pwnflow is a self-hosted, open-source mind-mapping platform for cybersecurity professionals to visualize and track security testing methodologies with AI assistance.

- **Category:** Security
- **Licence:** AGPL-3.0
- **Latest version:** 1.0.3
- **Open source:** oss
- **Languages:** Typescript, Python
- **Platforms:** Docker Compose
- **Tags:** Visualization, Mindmap, Security Tools, Web, React, Fastapi, Neo4j, Selfhosted, Pentest, Pentesting Tools, Redteam, Redteaming Tools, Vizualisation, AI Assisted

## Description

Pwnflow is a self-hosted mind-mapping tool for security professionals doing penetration testing, red teaming, and incident response. It lets you build interactive visual workflows, get AI-powered node suggestions via Google Gemini, save command templates with variables, and track methodology progress. Data stays on your infrastructure with AES-256-GCM encrypted exports, JWT authentication, and AI that only sees node titles. You can import methodologies from GitHub, export to CSV or encrypted formats, and migrate from older versions. The stack is React 19, TypeScript, Vite, TailwindCSS, XYFlow on the frontend, and FastAPI with Neo4j and Redis on the backend. Deploy with Docker Compose using the provided run.sh script for development or production behind nginx. Registration is off by default; admins create users via CLI.

## Links

- [Homepage](https://github.com/rb-x/pwnflow)
- [GitHub Repository](https://github.com/rb-x/pwnflow)

---
Source: https://selfhost.directory/project/pwnflow