cain-agent

AI penetration testing agent for authorized assessments, with scope enforcement and a cloud module covering major providers

Agent by cdxiaodong

IndexedApache-2.0★ 945

Write a review

Get started

Setup steps are in the repository. Repository

About

Cain runs a deterministic attack pipeline against a target given on the command line, and scope is enforced on every tool call. It covers AWS, Azure, GCP, Alibaba Cloud, Tencent Cloud and Huawei Cloud, plus OWASP Top 10 classes such as SQL injection and SSRF. It is built on the Claude Agent SDK and can route recon and test stages to different engines and models, including a pi backend.

Use cases: security, security-scanning

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Fact sheet

Jobs: securityREADME
Autonomy: Autonomous: runs tasks end to end and reports backREADME
Where you use it: TerminalREADME
Hosting: You run itREADME
Models: anthropic, openai, google, deepseek, openrouterREADME
Open source: Yes

Facts extracted by Claude Haiku 5.5 from the linked sources on Oct 24, 2026. Wrong fact? Tell us.

Built on

Frameworks named in its dependency files.

0.730score
Claude Agent SDK (Python)
Anthropic
Python SDK that runs the Claude Code agent loop inside your own program, with custom tools and hooks written as Python functions.
HarnessAFreshness: A★ 8.3K↓ 7.9M/wk

Signals

Stars: 945
Forks: 210
Open issues: 6
Last commit: Oct 14, 2026 (14 days ago)
Last release: Aug 25, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026).

Details

License: Apache-2.0
Repository: github.com/cdxiaodong/cain-agent
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: README github-graphql

Cite this page

cain-agent. Agent Mart. https://agentmart.dev/agents/cain-agent (last updated 2026-10-24)