Community
Free
GPLv3; self-hosting and model costs separate
- Included scope
- CLI/TUI security-testing engine
Darkmoon
● Identity checkedAI-assisted penetration testing and remediation · Official-source review 2026-10-09
Darkmoon is a self-hosted security-testing platform with orchestrated specialist agents, tool execution gates and reports. Its Pro edition advertises a live dashboard, REST access and proposed remediation pull requests for human review.
- Category
- AI-assisted penetration testing and remediation
- Free access
- Community engine is GPLv3 and free to self-host. Compute, model-provider usage and professional services are separate costs.
- API access
- MCP-gated tool execution and SDK/CLI integrations; live REST API, n8n and Grafana advertised on Pro.
Is Darkmoon right for you?
A good fit for
Relevant to authorized security teams defining explicit test scope, reviewing evidence and validating proposed fixes.
Before you choose
Captured Pro price €149/month equivalent, billed €1,788 annually; actual month-to-month rate unconfirmed. Managed service €799/engagement; Custom enterprise quote. Community reports Markdown/JSON; branded PDF and remediation are Pro. Counts of agents/tools vary across page sections. Exploit validation, privacy gateway and benchmark claims are vendor evidence, not our tests or security guarantees. No target scanned, exploit run, software installed or remediation generated.
Workflow and handoff
Establish written authorization and a controlled test environment, review evidence and proposed patches, and verify normal application behavior before merging.
Pricing and practical limits
Captured Pro price €149/month equivalent, billed €1,788 annually; actual month-to-month rate unconfirmed. Managed service €799/engagement; Custom enterprise quote. Community reports Markdown/JSON; branded PDF and remediation are Pro. Counts of agents/tools vary across page sections. Exploit validation, privacy gateway and benchmark claims are vendor evidence, not our tests or security guarantees. No target scanned, exploit run, software installed or remediation generated.
Review method
Official product evidence reviewed on 2026-10-09; product artwork inspected visually. No hands-on vendor application test was performed. Application performance, security claims and plan enforcement were not independently tested.
What it can do
Features & capabilities
Unknown is different from unavailable. Each fact carries its own evidence.
| Capability | Value | Evidence | Checked |
|---|---|---|---|
| Product workflow | Darkmoon is a self-hosted security-testing platform with orchestrated specialist agents, tool execution gates and reports. Its Pro edition advertises a live dashboard, REST access and proposed remediation pull requests for human review. | Facts sourced | 2026-10-09 |
| Pricing and restrictions | Captured Pro price €149/month equivalent, billed €1,788 annually; actual month-to-month rate unconfirmed. Managed service €799/engagement; Custom enterprise quote. Community reports Markdown/JSON; branded PDF and remediation are Pro. Counts of agents/tools vary across page sections. Exploit validation, privacy gateway and benchmark claims are vendor evidence, not our tests or security guarantees. No target scanned, exploit run, software installed or remediation generated. | Facts sourced | 2026-10-09 |
Understand the total cost
Darkmoon pricing & plans
Pro annual
Not listed
€1,788 billed annually; €149/month equivalent
- Included scope
- Dashboard, REST and remediation proposals
Managed engagement
Not listed
€799 per engagement; scope contract
- Included scope
- Vendor-run service
Alternatives to Darkmoon
View all ↗
Vortex by BestDefenseVortex maps registered applications, runs security tests and proposes remediation pull requests with retest evidence. A separate MCP product performs pre-commit checks against a locally running application.
Explore tool
Replay QA Security ScanReplay QA explores application journeys, records runtime sessions and reports bugs with investigation context and suggested fixes. Its security scans cover issues such as injection, access control and business logic.
Explore tool
Weavz.ioWeavz provisions workspaces, end users and governed MCP access to connected business apps. It combines app actions with approvals, browser control, sandbox execution, files and scoped state.
Explore toolThe practical questions
Frequently asked questions
Was the application hands-on tested?
No. This listing is based on dated official-source evidence and a visual artwork check. Unconfirmed costs and restrictions are identified explicitly.
What is Darkmoon used for?
Darkmoon is a self-hosted security-testing platform with orchestrated specialist agents, tool execution gates and reports. Its Pro edition advertises a live dashboard, REST access and proposed remediation pull requests for human review.
Does Darkmoon have a free plan?
Community engine is GPLv3 and free to self-host. Compute, model-provider usage and professional services are separate costs.. This record lists ongoing free access; check the plan limits before starting.
How much does Darkmoon cost?
No paid monthly price is listed; this record treats the product as free to start. See the plan cards for entitlements, billing commitments and seat minimums.
Can I use Darkmoon through an API?
MCP-gated tool execution and SDK/CLI integrations; live REST API, n8n and Grafana advertised on Pro.. API access and subscription access may have different terms; consult the linked sources.
What should I check before choosing it?
Captured Pro price €149/month equivalent, billed €1,788 annually; actual month-to-month rate unconfirmed. Managed service €799/engagement; Custom enterprise quote. Community reports Markdown/JSON; branded PDF and remediation are Pro. Counts of agents/tools vary across page sections. Exploit validation, privacy gateway and benchmark claims are vendor evidence, not our tests or security guarantees. No target scanned, exploit run, software installed or remediation generated.
Price history
No retained pricing changes yet. A current price alone does not establish a historical trend.
How this profile is supported
Official product information
Current official product source read individually; product artwork inspected visually.
Read original source ↗Pricing review
Official pricing and billing restrictions read individually.
Read original source ↗Facts apply to the named version and check date. Send a sourced correction if something changed.