Security & Testing AI Agents
Compare the best open-source AI agents for security & testing. Scanners, pentest helpers and test automation. Ranked by GitHub stars, with install commands, what each one can touch and scan reports where available.
ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
Strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Goose
an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM
Anthropic Cybersecurity Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Pentagi
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
Keploy
Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.
Evolver
The GEP-powered self-evolving engine for AI agents. Auditable evolution with Genes, Capsules, and Events. | evomap.ai
ODS
ODS V3 Pre-Release: Public testing and refinement ahead of the official V3 launch. Turn your PC, Mac, or Linux box into a private AI server.
Faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
T3MP3ST
autonomous red teaming platform; multi-agent offensive-security meta-harness
Osmedeus
A Modern Orchestration Engine for Security
Decepticon
Autonomous Hacking Agent for Red Team
Qodo Cover
Qodo-Cover: An AI-Powered Tool for Automated Test Generation and Code Coverage Enhancement! 💻🤖🧪🐞
Cairn
Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.
Tracecat
Open-source security automation platform for teams and AI agents
CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
Pentest Swarm AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
Mantis
A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
Artex Global
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Open Kritt
Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.
Pentest AI Agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
Agent Safehouse
Sandbox your local AI agents so they can read/write only what they need
LuaN1aoAgent
LuaN1aoAgent is a fully autonomous AI-driven penetration testing agent powered by graph-based cognitive reasoning.
Xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
List refreshed November 15, 2026. Data comes from public GitHub repositories.