GitHub

pentest-ai

Agent infrastructure

Observation pool · not formally ranked

This project does not currently meet the main index requirement of two current dimensions across two source types.

— Not ranked

Observed adoptionMissing

—

MomentumCurrent · 2026-09-12

AttentionCurrent · 2026-09-12

Signal confidence Based on how many independent score dimensions currently have data.

Medium2/3 · 1 source types

Methodology v2.0 · snapshot 2026-09-12 · stale after 2 days

About

The pentest tool that proves its findings. No oracle, no badge.

⚠️ Offensive tooling, authorized testing only. By installing you accept the AUP and Terms. Full text in Responsible use ↓

ptai is an AI-driven pentest tool that re-runs every exploit to confirm it. It runs recon, logs in, and chains findings into multi-step attack paths, but it does not ask you to trust the results. The way TruffleHog confirms a leaked secret by logging in with it, ptai confirms a web finding by re-running the exploit: a finding stays a candidate until a machine oracle reproduces it N out of N, and only then does it earn a VERIFIED badge. Third-party scanner output (nuclei, nikto, zap) is held back until an…

Across sources

GitHub 0xSteph/pentest-ai metrics & trend →

1.7k Stars

Stars 1.7k
Forks 313
Commits 406
Releases 24