0xSteph / pentest-ai
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
Why this job: says: pentest; topics: security, ai-security, pentesting, red-team, cybersecurity
What it does
Use it through MCP (Claude Code, Codex, Cursor, VS Code), from the CLI, or in CI/CD. The model drives the investigation; an independent oracle decides whether a finding earns a verified verdict, so the model's guesses never arrive dressed as results.
Get started
No single install command. Read the steps in the README (opens in new tab)
- Maintenance
- Active
- Last commit 6 days ago
- Stars
- 1,813
- +18 this week
- Licence
- MIT
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- v1.6.1
- Released 6 days ago
- Built with
- Python
- 98% of the code
Is it looked after?
- Contributors
- 1
- Last 90 days
- Issues
- 78% closed
- 2 still open
- Pull requests
- 28 merged
- 2 waiting
- Releases
- 27
- 27 in the last year
- No contributing guide
- Security policy (opens in new tab)
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| awarexone / Agentic-Bug-Hunter | 5,748 | 12 days ago | MIT | No downloads |
| samugit83 / redamon | 3,337 | yesterday | MIT | No downloads |
| ASCIT31 / Dark-Moon | 1,211 | 13 days ago | GPL-3.0 | No downloads |
More: languages, topics and project record
Languages
- Python 98%
- Jinja <1%
- JavaScript <1%
- CSS <1%
Topics
- ai-penetration-testing
- ai-pentesting
- ai-security
- appsec
- bug-bounty
- claude
- ctf
- cybersecurity
- devsecops
- ethical-hacking
- hacking-tools
- mcp
Project record
- JobAI security
- StatusListed
- Commits453
- Forks333
- Watching14
- Stars in 28 days+84
- CreatedApr 4, 2026
- First seen by usNov 7, 2026
- CheckedNov 7, 2026