Home/AI Agents/pentest-ai

pentest-ai

0xSteph/pentest-ai

Offensive-security MCP server with security tools and agents

GitHub Website

GraphCanon updated Sep 30, 2026 · GitHub synced Sep 20, 2026

59views this month

1.7k stars314 forksLast push Sep 13, 2026 Python MIT

Decision brief

Pentest-ai is an offensive-security platform featuring over 200 security tools and agents for various security tasks including exploit chaining and osint, licensed under MIT.

Good fit when

When you need a comprehensive suite that includes more than 205 security tools and 17 specialist agents.
For projects requiring exploitation techniques covered by the OWASP Top 10, leveraging the platform's 60 SPA-aware probes.

Avoid when

If your requirements do not include offensive-security capabilities or exploit chaining.
When you want to avoid MIT-licensed open-source code and prefer proprietary solutions without sharing obligations.

Observed Jul 17, 2026 · Source: enrich:decision_facts

pentest-ai alternatives Trust report

Verify the decision

Maintenance and security

Full trust report

Maintenance: Very active (6d since push); As of Sep 20, 2026
Provenance: Not a fork · Personal account; As of Sep 20, 2026
Security (OSV): No MCP manifest; As of Jul 11, 2026

Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.

Install

pip install pentest-ai

PyPI

Similar tools

Same-category neighbours. No typed graph edges are catalogued for this tool yet.

promptfoo

Test prompts, agents, and RAGs. Compare performance of various LLMs.

25k★

PentestGPT

Automated Penetration Testing Agentic Framework Powered by Large Language Models

16k★

hexstrike-ai

Advanced MCP server for automated cybersecurity tasks using AI agents

12k★

Evidence and technical details

Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.

Overview

Pentest-ai offers an offensive-security platform that includes various security tools for bug bounty, CTF, OSINT tasks, exploit chaining, and more.

Capability facts

Deploy: Self-host
Source: dockerfile:Dockerfile · Sep 20, 2026
Docker: Dockerfile present
Source: dockerfile:Dockerfile · Sep 20, 2026
CLI: CLI entrypoint
Source: pyproject.toml:[project.scripts] · Sep 20, 2026
Languages: python
Source: github.language+pyproject.toml · Sep 20, 2026

Compatibility

Sourced claims from the README excerpt - not unsourced marketing copy.

Python runtimePython

Source: README excerpt (regex_v1, Sep 20, 2026)

Use Python **3.10–3.14** and install [pipx](https://pipx.pypa.io/stable/installation/)

Source link

README

Website · Quick start · Verification · Documentation · Issues Pentest AI connects an AI client or model to a penetration testing workflow. It investigates applications, records findings, and uses machine oracles to check whether an exploit can be reproduced . Verified findings ca...

For agents

This page has a .md twin and JSON over the API.

/tools/0xsteph-pentest-ai.md GET /api/graphcanon/tools/0xsteph-pentest-ai GET /api/graphcanon/graph?tool=0xsteph-pentest-ai