PentestGPT
Automated Penetration Testing Agentic Framework Powered by Large Language Models
GraphCanon updated 4d · GitHub synced 4d · 66 views this month
Decision brief
PentestGPT specializes in automating parts of the penetration testing process through large language models, offering a unique approach to AI-assisted security assessments.
Good fit when
- - When you need an automated framework for certain tasks within penetration testing that can be handled by large language models.
- - If your organization is interested in exploring how LLMs can assist with identifying vulnerabilities and conducting initial security scans.
Avoid when
- - Avoid using PentestGPT if manual, nuanced analysis is required, as its reliance on LLM might not cover all complexities of a security assessment.
- - If your organization does not have the legal authority to conduct penetration testing on specific targets, as indicated by its disclaimer for 'educational purposes and authorized security testing'.
- Requirements:
- - Python environment; - Access to large language models as stipulated by PentestGPT's operational requirements
Observed Jul 11, 2026 · Source: enrich:decision_facts
Verify the decision
Maintenance and security
Full trust report- Maintenance
- Steady (33d since push)
- As of 4d
- Provenance
- Not a fork · Personal account
- As of 4d
- Security (OSV)
- No lockfile
- As of 1mo
Public GitHub metadata and optional OSV scans. Signals, not a guarantee. Trust methodology.
Install
pip install PentestGPT PyPIHow it fits your stack(7)
Typed graph edges - alternatives, integrations, successors, and dependencies. Ranked by relationship type, not raw GitHub stars.
Alternative
Integrates
Relationship graph
Optional deeper exploration of typed edges and category neighbours.
Similar tools
Same-category neighbours not already linked as typed edges.
Evidence and technical details
Sourced facts, taxonomy, compatibility claims, README excerpt, and machine-readable endpoints.
Overview
PentestGPT is a Python-based framework that utilizes large language models to automate parts of the penetration testing process.
Capability facts
- Deploy
- Self-host
Source: dockerfile:Dockerfile · Aug 17, 2026
- Docker
- Dockerfile present
Source: dockerfile:Dockerfile · Aug 17, 2026
- CLI
- CLI entrypoint
Source: pyproject.toml:[project.scripts] · Aug 17, 2026
- Languages
- python
Source: github.language+pyproject.toml · Aug 17, 2026
Categories
Tags
README
Installation
Installation
git clone https://github.com/GreyDGL/PentestGPT.git
cd PentestGPT
make install # runs uv sync
Run in Docker (install once, log in once)
A self-contained image bundles the tool + the Claude Code and Codex CLIs. You log in once and the sessions persist in named volumes — no re-login on later runs.
make docker-build # build the tool image
make docker-login # ONE-TIME, idempotent: checks logins, logs in only what's missing
make docker-auth-status # check both are logged in (ROUNDTRIP=1 for a live 1-token check)
---
## License
Distributed under the MIT License. See `LICENSE.md` for more information.
**Disclaimer**: This tool is for educational purposes and authorized security testing only. The authors do not condone any illegal use. Use at your own risk.
---
For agents
This page has a .md twin and JSON over the API.