Mengbi
Quality score 87Apentestai.xyz#agents#business#coding#productivity

Pentest-AI: It Doesn't Flag, It Proves

Pentest-AI is an open-source AI penetration-testing CLI and MCP server. It runs locally and keeps findings as candidates until a machine oracle re-runs the exploit and reproduces it three for three, only then turning them green.

Visit website

About this tool

Pentest-AI is an open-source AI penetration-testing CLI and MCP server designed for local self-hosted security testing. It integrates with AI clients such as Codex and Claude Code through MCP, allowing these clients to call its testing tools. Its core workflow revolves around evidence: findings start as candidates and are only confirmed as verified after a machine oracle re-runs the exploit and reproduces it three consecutive times. This ensures that reported findings are proven, not just flagged. Installation is via pipx or pip, and it supports Linux, macOS, Windows, and Web platforms. It is MIT-licensed and free to use, with free, freemium, subscription, one-time, and credit-based models available.

Best for
  • DevOps teams
  • Penetration testers
  • Developers
  • Security engineers
Use cases
  • Local self-hosted security testing
  • MCP integration with AI clients
  • AI-assisted penetration testing
  • CI scan and build gating
  • Reproducible exploit evidence export
Strengths
  • Open-source and MIT-licensed
  • Public API available
  • Self-hosted
  • Findings verified by machine oracle for accuracy
  • Integrates with AI clients like Codex and Claude Code
Limitations
  • Medium learning curve
  • Requires pipx and an AI client to be installed
  • Each teammate must install Pentest-AI locally
  • Optional scanner wrappers need corresponding tools installed

Features & use cases

Machine oracle verification: findings confirmed only after three consecutive reproductionsMCP server integration for Codex and Claude CodeLocal self-hosted operation with MIT licenseSupports Linux, macOS, Windows, and WebInstallation via pipx or pipSupports Ollama local modelsCI integration for scanning and build gatingEvidence export functionality

Quick facts

Self-hosting supported

At a glance

Monetization
  • Free
  • Freemium
  • Subscription
  • One-time purchase
  • Credit-based
Maturity signals
  • Open source
  • Public API
  • Self-hostable
Learning curve
  • Medium

Resources

Client and model setup guide ↗

Sources

Every profile keeps its sources and latest verification date.
01https://pentestai.xyz/docs/getting-started/

Similar tools

OpenTypeless
opentypeless.com
95

OpenTypeless is an open-source desktop voice input tool that turns speech into AI-polished, formatted text typed directly into any desktop app.

Freemium · $4.99+/mo

Open details
TypeScript AI Framework for Agents and Apps
mastra.ai
90

Answer your users. Act inside your product. Hand off to a human

Paid · $0.50+

Open details
The vector database to build knowledgeable AI
pinecone.io
79

Pinecone is the trusted AI knowledge company. Its AI knowledge platform—Database, Nexus, and Marketplace—powers accurate, fast, cost-effective AI for 10,000+ customers and 1M developers worldwide.

Freemium · $2+/mo

Open details
P
Probe
probelabs.com
87

Probe is an AI code intelligence tool designed for multi-million line codebases, enabling automated code reviews, issue triage, and cross-team code intelligence.

Freemium · $40/yr

Open details