GraphCanon updated 3w · GitHub synced 3w
Decision brief
Pentest-ai is an offensive-security platform featuring over 200 security tools and agents for various security tasks including exploit chaining and osint, licensed under MIT.
Good fit when
- When you need a comprehensive suite that includes more than 205 security tools and 17 specialist agents.
- For projects requiring exploitation techniques covered by the OWASP Top 10, leveraging the platform's 60 SPA-aware probes.
Avoid when
- If your requirements do not include offensive-security capabilities or exploit chaining.
- When you want to avoid MIT-licensed open-source code and prefer proprietary solutions without sharing obligations.
Observed Jul 17, 2026 · Source: enrich:decision_facts
Verify the decision
Maintenance and security
Full trust report- Maintenance
- Active (21d since push)
- As of 3w
- Provenance
- Not a fork · Personal account
- As of 3w
- Security (OSV)
- No MCP manifest
- As of 1mo
Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.
Install
pip install pentest-aiSimilar tools
Same-category neighbours. No typed graph edges are catalogued for this tool yet.
Evidence and technical details
Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.
Overview
Pentest-ai offers an offensive-security platform that includes various security tools for bug bounty, CTF, OSINT tasks, exploit chaining, and more.
Capability facts
- Deploy
- Self-host
Source: dockerfile:Dockerfile · Jul 27, 2026
- Docker
- Dockerfile present
Source: dockerfile:Dockerfile · Jul 27, 2026
- CLI
- CLI entrypoint
Source: pyproject.toml:[project.scripts] · Jul 27, 2026
- Languages
- python
Source: github.language+pyproject.toml · Jul 27, 2026
Categories
Tags
README
which tools the LLM will need and asks ONCE to install the missing
~/.pentest-ai/install-preferences.json.
ptai start https://target.example.com
2. Batch install upfront. Skips the engagement-time prompt entirely.
ptai setup --tier core # ~6 essentials, ~30s ptai setup --tier recommended # + fuzzers, crawlers, password tools, ~5m ptai setup --tier full # everything, ~30m
3. Install specific tools by name.
ptai setup --per-tool wpscan,dalfox,paramspider ptai setup --wizard # interactive picker
In non-interactive contexts (`PTAI_NON_INTERACTIVE=1` or no TTY) ptai uses what's on PATH and logs (rather than prompts) for anything missing.
<details>
<summary><strong>Other paths</strong>: REST API, MCP composition, HITL teleoperation, cloud workspace, public benchmarks</summary>
---
## License
MIT. Do whatever you want with it.
<div align="center">
**If `ptai` saved you a Sunday, [star the repo](https://github.com/0xSteph/pentest-ai). It's the only payment I ask for.**
</div>
For agents
This page has a .md twin and JSON over the API.