pentest-harness
Self-hosted AI agent harness for authorized penetration tests and security labs, using your own model API keys.
Agent by S1N6H
IndexedMIT★ 430
Get started
Setup steps are in the repository. Repository
About
Pentest Harness is an open-source, self-hosted agent harness for authorized penetration tests, bug bounty research, security labs and CTFs. You connect your own API key from providers such as OpenAI, Anthropic, DeepSeek, Google, Mistral, Groq or OpenRouter, or any OpenAI-compatible gateway, and keys are kept in an owner-only credential store. Its toolset covers shell, filesystem, web research, skills, subagents and background jobs, with sessions saved as JSONL or SQLite. The project is MIT licensed.
Use cases: security, security-scanning
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Fact sheet
- Jobs
- securityREADME
- Where you use it
- WebREADME
- Hosting
- You run itREADME
- Models
- openai, anthropic, deepseek, google, mistral, groq, openrouter, azure-openaiREADME
- Open source
- YesREADME
- Billing
- You pay your model provider directly, using your own API key.README
Facts extracted by Claude Haiku 5.5 from the linked sources on Oct 24, 2026. Wrong fact? Tell us.
Signals
- Stars
- 430
- Forks
- 71
- Open issues
- 1
- Last commit
- Sep 11, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/S1N6H/pentest-harness
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- READMEgithub-graphql
Cite this page
pentest-harness. Agent Mart. https://agentmart.dev/agents/pentest-harness (last updated 2026-10-24)