Agents

Open-source autonomous pentesting agents that run your app, find vulnerabilities and validate them with working proofs of concept.

Open-source AI pentester that reads web app source code and proves vulnerabilities with working exploits

Self-hosted multi-agent system that runs penetration tests with common security tools inside a Docker sandbox

Agent framework that gives the agent its own Dockerized Linux computer with a browser, projects, skills and plugins

Self-hosted Go workspace where AI agents run security tools through MCP for authorized testing.

Autonomous red-team agent with a Docker stack, terminal CLI, web dashboard and hosted option.

Open-source AI penetration-testing agent that runs recon, exploitation and reporting from natural language.

Open-source, self-hosted swarm of AI agents for authorized API and web-app penetration testing.

CLI-first penetration-testing agent in Rust that runs recon, testing and validation, with a second model checking each finding.

Self-hostable autonomous pentesting agent that re-exploits each finding with an independent verifier before reporting it.

Research agent from Princeton and Stanford that lets a language model fix GitHub issues and other tasks by using tools on its own

Autonomous penetration testing agent with a Kali Docker sandbox, a Textual TUI and any OpenAI-compatible model gateway

Autonomous penetration testing agent that drives Claude Code or Codex through staged recon, exploit and report pipelines.

AI penetration testing agent for authorized assessments, with scope enforcement and a cloud module covering major providers

Terminal pentesting agent that runs specialist subagents over a shared engagement state and supports 20+ LLM providers

Web app for penetration testing with AI chat and an agent mode that runs commands in E2B cloud sandboxes, using OpenRouter models

Self-hosted autonomous pentesting agent that finds and exploits vulnerabilities and logs the command and output for each one

Autonomous security-testing agent on the Pi SDK that plans tasks in a graph and keeps evidence for each conclusion.

Terminal CLI for penetration testers that plans against a scoped target, asks before sensitive actions and writes evidence-backed findings.

Multi-agent platform that audits source code for vulnerabilities, verifies findings and drafts CVE reports

Open-source agentic SAST scanner: AI agents follow imports and call graphs to confirm findings in a repo or PR diff.

Home Assistant integration with a LangGraph agent for conversational control, automation creation, camera analysis and anomaly alerts.

Self-hosted AI agent harness for authorized penetration tests and security labs, using your own model API keys.

AWS's AI assistant for developers that chats, writes and tests code, upgrades Java and .NET apps, and helps operate AWS