PentestAgent
Agent framework for black-box security testing and bug bounty work.
Updated
✨ Try AgentScout's free AI image generator →Good for: building AI agents, agent security and safety, security testing
Use cases
About PentestAgent
PentestAgent is listed in our security & governance category and is aimed at builders. Agent framework for black-box security testing and bug bounty work. Pricing, as the maker states it: Open source. Maturity: Active. We last checked the official link on 2026-10-16.
What is PentestAgent?
PentestAgent is an agent framework for black-box security testing and bug-bounty work. It can run inside a Docker container with Linux pentesting tools preinstalled, using tools such as nmap, msfconsole and sqlmap directly through its terminal tool.
It needs an API key for OpenAI, Anthropic or another LiteLLM-supported provider, or you can point it at any OpenAI- or Anthropic-compatible endpoint. Its TUI offers three modes.
Sources: the official README and our directory listing, checked 2026-10-18. Official site: github.com/GH05TCREW/pentestagent.
Who is PentestAgent for?
Security testers and bug-bounty hunters who want an AI agent to assist with authorized black-box testing.
PentestAgent at a glance
- Open source: Yes (MIT License)
- GitHub: GH05TCREW/pentestagent · 3,202 stars (as of Oct 21, 2026)
Key features
- Docker container with pentesting tools
- Uses nmap, msfconsole, sqlmap and more
- LiteLLM providers or compatible endpoints
- TUI with three modes
PentestAgent FAQ
What is PentestAgent?
PentestAgent is an agent framework for black-box security testing and bug-bounty work. It can run inside a Docker container with Linux pentesting tools preinstalled, using tools such as nmap, msfconsole and sqlmap directly through its terminal tool.
Who is PentestAgent for?
Security testers and bug-bounty hunters who want an AI agent to assist with authorized black-box testing.
Is PentestAgent free?
PentestAgent's pricing, as the maker states it: Open source. Open-source tools are free to use, though you may still pay for model API usage or a hosted plan. Check the official site for current plans.
Is PentestAgent open source?
Yes. PentestAgent is released under the MIT License, according to its GitHub repository.
What are alternatives to PentestAgent?
Similar tools include PentAGI, Tracecat, Snyk Agent Scan, CyberStrike, Mindflow and Simbian.
PentestAgent ratings and reviews
Be the first to rate PentestAgent: tap 1 to 5 stars below. A written review is optional.
PentestAgent alternatives
Other security & governance tools in our directory. See all security & governance tools →
PentAGI
Autonomous multi-agent system for running penetration testing tasks.
Tracecat
Open-source security automation platform for teams and AI agents.
Snyk Agent Scan
Snyk's scanner for security risks in MCP servers and agent skills.
CyberStrike
Terminal agent for authorized penetration testing that runs recon, vulnerability discovery and reporting with specialized security agents on your own LLM.
Mindflow
No-code automation and AI agents for security and IT operations.
Simbian
AI agents for security operations, threat hunting and response.
Badge for makers
Built PentestAgent? Add this badge to your README or site. It links back to this page. About badges
