# CMSmap

CMSmap is a Security Scanning product. It runs on-premises. Pricing is free.

A python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

Checked October 2026.

## What is CMSmap?

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

It is designed to automate the process of detecting security flaws in the most popular Content Management Systems (CMS) such as WordPress, Joomla, Drupal, etc.

It is a powerful tool for security professionals and penetration testers to identify potential security vulnerabilities in CMS installations.

Tags: Scanner

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [Security Scanning](https://cybersectools.com/categories/security-scanning)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 1,120
- Website: github.com

## CMSmap FAQ

### What is CMSmap?

CMSmap is a product in the Security Scanning category. It covers Scanner.

### What is the pricing for CMSmap?

CMSmap is free. Download and setup instructions are at https://github.com/Dionach/CMSmap/.

### What are alternatives to CMSmap?

Alternatives to CMSmap listed on CybersecTools:

1. [Sekant Online Phishing Scanner](https://cybersectools.com/tools/sekant-online-phishing-scanner) - Web-based URL scanner that checks if a site is phishing or malicious. (Free)
2. [Jsmon 2.0](https://cybersectools.com/tools/jsmon-20) - JavaScript security scanner for detecting vulnerabilities in third-party scripts (Commercial)
3. [RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/tools/roboshadow-owasp-zap-vulnerability-scanner) - Web app & network vulnerability scanner integrating OWASP ZAP, Shodan & Nmap (Commercial)
4. [Aikido EOL Scanner](https://cybersectools.com/tools/aikido-eol-scanner) - Detects end-of-life and outdated software in code and containers (Commercial)
5. [Intruder XSS Scanner](https://cybersectools.com/tools/intruder-xss-scanner) - XSS vulnerability scanner for web apps and APIs with automated scanning (Commercial)

Compare all CMSmap alternatives at [https://cybersectools.com/alternatives/cmsmap](https://cybersectools.com/alternatives/cmsmap)

### What deployment and organization size does CMSmap fit?

CMSmap is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare CMSmap with similar solutions

- [CMSmap vs Sekant Online Phishing Scanner](https://cybersectools.com/compare/cmsmap-vs-sekant-online-phishing-scanner)
- [CMSmap vs Jsmon 2.0](https://cybersectools.com/compare/cmsmap-vs-jsmon-20)
- [CMSmap vs RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/compare/cmsmap-vs-roboshadow-owasp-zap-vulnerability-scanner)

All alternatives to CMSmap: [/alternatives/cmsmap](https://cybersectools.com/alternatives/cmsmap)

---

Source: https://cybersectools.com/tools/cmsmap

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on CMSmap: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md