Roadmap

The direction at a glance: themes and version milestones, not a task list. Current version is v0.1.0, pre-1.0.

Last updated October 10, 2026

Granular tasks live in theCHANGELOGand the canonicalROADMAP.md.

NowFirst public releaseIn progress

A clean first public release, quality over new features

  • Ship pipeline: publish digest-pinned images to Docker Hub so the production compose file and the in-app update check work.
  • Test confidence: keep the backend and frontend suites green in public CI, with a Playwright end-to-end suite in CI.
  • Bug-fixing from the first public installs: triage what users report.
  • Repo hardening: CodeQL, secret scanning, supply-chain defence, signed releases.
  • Docs at netmapper.nx1xlab.dev: install, upgrade, HTTPS, first-time setup, with screenshots.
2
Nextv0.2.0Planned

Rounding out operability and closing the known partials

  • Operator controls: auto-scan Settings toggle, per-scan traffic budget.
  • Alerting depth: live SMTP/Slack smoke, native Wazuh driver.
  • Coverage to target: remaining gap modules (SNMP scanner), top frontend components, surviving-mutant fixes.
  • Infra hardening: Helm chart out of beta (HPA, NetworkPolicy, backups), Terraform validation, Redis-backed caching and rate-limit storage.
3
Laterv1.0.0Planned

General availability: production-grade across the eleven non-negotiables

  • Public/external API: versioned, authed, rate-limited surface.
  • Network write paths: config push, gated behind a safety model.
  • Performance at scale: tuned async scan for 50+ switch fleets; validated Postgres benchmarks.
  • Rich device classification: nmap OS-detect opt-in, per-device history drawer (VLAN, port, DHCP lease).
  • Release notes and polish: finalized 1.0 notes, cross-browser visual pass.
4
FuturePost-1.0Future

Bigger bets

  • Celery/Redis background workers.
  • Advanced ML anomaly detection.
  • Mobile-friendly operator app.
  • More vendor scanners, community-driven.
  • Pro (commercial add-on): SSO/SAML/LDAP, multi-tenant.

Ordering within a version is rough priority, not a date commitment.

Product pillars

Every user-facing feature must satisfy the eleven non-negotiables. A change that touches auth or data ships its permission and audit-log path in the same PR, never deferred.

AuthDatabasePermissionsSecurityCachingLogsRate limitsDeploymentsBackupsMonitoringRecovery

Want to contribute?

Closing open security gaps and adding vendor scanners are the highest-value contributions right now. Bug reports and docs fixes are welcome too.

View on GitHubOpen an issue