Pentest AI

Website · Quick start · Verification · Documentation · Issues Pentest-AI connects an AI client or model to a penetration-testing workflow. It investigates applications, records findings, and uses machine oracles to check whether an exploit can be reproduced . Verified findings carry evidence you can replay. Use it through MCP , from the CLI , or in CI . The model helps drive the investigation; an oracle determines whether a finding earns a verified verdict. Test only systems you own or have explicit authorization to assess. Read the acceptable-use policy and terms before running an engagement. Quick start Recommended: Codex or Claude Code Use Python 3.10–3.14 and install pipx first. Run and reopen your terminal if needed. pipx isolates Pentest-AI's dependencies and makes its commands available across folders. Install your AI client's CLI first. Setup asks before connecting all detected supported clients , including both Codex and Claude Code when installed. It preserves existing registrations. Restart your client afterward. The wizard uses user-wide settings . It does not install clients, sign you in, download models or configure Ollama. Your AI client supplies the mod