Home

PentestAI

AI-powered penetration testing framework. Autonomous scanning, 53 tools, 9,000+ CVE templates, self-healing agents, professional reports.

For authorized penetration testing only. Always obtain written permission before scanning any target.

---

Quick Start

git clone https://github.com/blackbuble/pentestai.git
cd pentestai
bash setup.sh
source .venv/bin/activate
pentestai autopilot http://target.com --report report.html

Done. You now have a scan report.

Scan presets

Preset	What it does	Time
quick	Headers + CVE check only	~20s
owasp10	OWASP Top 10 vulnerabilities	~2 min
api	API-focused testing	~2 min
full	Everything (default)	~5 min

pentestai autopilot http://target.com --preset quick
pentestai guided             # interactive wizard

---

Documentation

Getting Started

• User Guide — Installation to complete engagement
• Deployment — Docker, Compose, bare metal
• Configuration — All environment variables
• Troubleshooting — Common failures and fixes

Core

• Architecture — System design and data flow
• Agents — AutoPilot, ReAct, KillChain, SelfHeal
• Tools Reference — All 53 tools documented
• Skills & Memory — Memory system, knowledge graph, RAG pipeline

Scanning

• LLM Setup — 15 LLM provider configs
• LLM Agents — Complete list of supported models
• Lab Setup — Docker lab and HTB validation
• Benchmark — XBOW methodology, CI gate, run budget

Reporting

• Reports — Word, PTES, ISO 27001, evidence vault
• API Reference — REST API endpoints, auth, examples

Project

• Roadmap (Platform) — 6-phase platform roadmap
• Roadmap (12-Month) — 12-month plan to v1.0
• Milestones — M1-M3 capability milestones
• Status — What's real vs in development
• Contributing — Dev setup, test standards, PR flow