Agents

Open-source autonomous pentesting agents that run your app, find vulnerabilities and validate them with working proofs of concept.

Open-source AI pentester that reads web app source code and proves vulnerabilities with working exploits

Agent framework that gives the agent its own Dockerized Linux computer with a browser, projects, skills and plugins

Autonomous red-team agent with a Docker stack, terminal CLI, web dashboard and hosted option.

Open-source AI penetration-testing agent that runs recon, exploitation and reporting from natural language.

Open-source, self-hosted swarm of AI agents for authorized API and web-app penetration testing.

CLI-first penetration-testing agent in Rust that runs recon, testing and validation, with a second model checking each finding.

Research agent from Princeton and Stanford that lets a language model fix GitHub issues and other tasks by using tools on its own

Autonomous penetration testing agent with a Kali Docker sandbox, a Textual TUI and any OpenAI-compatible model gateway

Autonomous penetration testing agent that drives Claude Code or Codex through staged recon, exploit and report pipelines.

AI penetration testing agent for authorized assessments, with scope enforcement and a cloud module covering major providers

Terminal pentesting agent that runs specialist subagents over a shared engagement state and supports 20+ LLM providers

Self-hosted autonomous pentesting agent that finds and exploits vulnerabilities and logs the command and output for each one

Open-source agentic SAST scanner: AI agents follow imports and call graphs to confirm findings in a repo or PR diff.

AI code reviewer for pull requests that also runs in the IDE and CLI and learns from team feedback