pentest-ai-agents

● Identity checked

Code · Vendor site 2026-10-04

pentest-ai is an open-source AI penetration-testing CLI and MCP server that runs locally and stores findings in SQLite. It keeps scanner results as candidates until machine oracles rerun exploits and verify them before marking findings proven.

Updated 2026-10-04View sources

Official website

Category: Code
Free access: MIT-licensed open-source software installable via pipx with a bundled demo that needs no API key.
API access: Site documents an MCP server setup via ptai setup --mcp for connecting Codex, Claude Code, or local models.

Is pentest-ai-agents right for you?

A good fit for

Security engineers who want reproducible, oracle-verified findings from local AI-assisted pentests.

Before you choose

Verification depends on oracle reruns and supported vulnerability classes; third-party scanner hits stay unverified until proven.

Verified local AI pentesting

pentest-ai combines AI-driven probing with deterministic oracle reruns so verified weaknesses ship with replayable proof capsules from your own hardware.

What it can do

Features & capabilities

Unknown is different from unavailable. Each fact carries its own evidence.

Capability	Value	Evidence	Checked
Verification	Marketing states findings become verified only after oracles rerun exploits and confirm controls.	Facts sourced	2026-10-04
License	Site metadata lists an MIT open-source license for the CLI and MCP server.	Facts sourced	2026-10-04
Install	Getting started docs recommend pipx install ptai and a local ptai demo without external targets.	Facts sourced	2026-10-04

Understand the total cost

pentest-ai-agents pricing & plans

Free

MIT-licensed open-source software installable via pipx with a bundled demo that needs no API key.

Access: MIT-licensed open-source software installable via pipx with a bundled demo that needs no API key.

Explore pricing & history

Alternatives to pentest-ai-agents

View all ↗

Devin

Devin is Cognition’s autonomous software engineering agent that runs in the cloud or locally, tests in its own browser, and works toward merge-ready pull requests. Plans span individual coding quotas through team collaboration with Devin Cloud, DeepWiki, and enterprise controls.

Explore tool

Code Snippets AI

It supports local and cloud LLMs, codebase indexing on paid tiers, and a free Basic plan with your own API keys.

Explore tool

Aikido Security

Aikido Security is a developer-first application security platform covering dependencies, SAST, secrets, cloud misconfigurations, containers, and AI-assisted autofix across the SDLC. Pricing tiers scale from a free Developer workspace to paid Basic, Pro, and Advanced plans for larger repos and infrastructure coverage.

Explore tool

The practical questions

Frequently asked questions

What is pentest-ai-agents used for?

Does pentest-ai-agents have a free plan?

MIT-licensed open-source software installable via pipx with a bundled demo that needs no API key.. This record lists ongoing free access; check the plan limits before starting.

How much does pentest-ai-agents cost?

No paid monthly price is listed; this record treats the product as free to start. See the plan cards for entitlements, billing commitments and seat minimums.

Can I use pentest-ai-agents through an API?

Site documents an MCP server setup via ptai setup --mcp for connecting Codex, Claude Code, or local models.. API access and subscription access may have different terms; consult the linked sources.

What should I check before choosing it?

Verification depends on oracle reruns and supported vulnerability classes; third-party scanner hits stay unverified until proven.

Price history

No retained pricing changes yet. A current price alone does not establish a historical trend.

How this profile is supported

Identity and profile

Reviewed vendor source

Read original source ↗

2026-10-04

Facts apply to the named version and check date. Send a sourced correction if something changed.