pentagi

vxcontrol/pentagi is an open-source project by vxcontrol: Fully autonomous AI Agents system capable of performing complex penetration testing tasks. Indexed here so it can be found — not resold.

It is free. Get it from the upstream repository: https://github.com/vxcontrol/pentagi

From the project's own README (excerpt, reproduced for discovery under its MIT license):

PentAGI

P enetration testing A rtificial G eneral I ntelligence

> Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments.

⠀

Table of Contents • Overview • Features • Architecture • Agent Supervision • Quick Start • Agent Docker Access • Running Several Instances • How to Use PentAGI After Login • API Access • LLM Provider Configuration • Azure OpenAI • Ollama • OpenAI • Anthropic • Google AI (Gemini) • AWS Bedrock • DeepSeek • GLM • Kimi • Qwen • MiniMax • Mistral • xAI (Grok) • Advanced Setup • Langfuse Integration • Monitoring and Observability • Knowledge Graph (Graphiti) • OAuth Integration • Docker Image Configuration • Development • Testing LLM Agents • Embedding Configuration and Testing • Function Testing with ftester • Building • Credits • License

Overview

PentAGI is an open-source, self-hosted multi-agent system for autonomous penetration testing. You describe a target and a goal in plain language; a team of specialized AI agents plans the work, runs 20+ professional tools such as nmap, Metasploit and sqlmap inside an isolated Docker sandbox, remembers what it learned and hands you a report. • Who it is for. Security engineers, penetration testers, researchers and red teams who want an autonomous assistant on their own infrastructure, for authorized testing only. • What sets it apart. It runs on your own servers with the model of your choice: 10+ cloud LLM providers, your own OpenAI-compatible gateway, or local models through Ollama or vLLM. Results and successful approaches are kept in PostgreSQL with pgvector for later flows, an optional Neo4j knowledge graph tracks hosts, services and findings, execution…