Topics / #ai-security-tool
AI security tool projects on GitHub
Security tools that use AI for offense or defense in cybersecurity.
As of , the most-starred AI security tool projects on GitHub are pentagi (30.8K stars), hexstrike-ai (12.9K stars) and CyberStrikeAI (7.8K stars). GitHub.Locker tracks 7 AI security tool repositories with 58.6K stars combined. The fastest-growing on October 16 was pentagi, with +219 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
pentagi
vxcontrol/pentagi · ★ 30.8KPentAGI (Penetration testing Artificial General Intelligence) is a fully autonomous AI agent system that performs complex penetration testing tasks for you.
+77ai-security-tool
ZeroDayEvil/ai-security-tool · ★ 775AI Security Tool is an open-source, cross-platform terminal and vulnerability scanner that combines a multi-protocol connectivity client (SSH, RDP, VNC, etc.), CVE/SBOM supply-chain auditing, and 12+ autonomous AI agents (DeepSeek, OpenAI) to automate pentesting, Red Team, and CTF workflows.
+49hexstrike-ai
0x4m4/hexstrike-ai · ★ 12.9KHexStrike AI MCP Agents is an MCP server that lets AI agents like Claude, GPT, or Copilot autonomously run 150+ real cybersecurity tools for automated pentesting, bug bounty hunting, CTF challenges, and vulnerability discovery.
+26nono
nolabs-ai/nono · ★ 4.5Knono is a zero-setup, zero-latency sandbox that runs AI coding agents (Claude Code, Codex, OpenCode, etc.) with least-privilege access, so they can't touch your SSH keys, cloud credentials, or the rest of your disk by default.
The all-time top
7 projects · by stars
- 30.8K
#1 · vxcontrol/pentagi
pentagi
PentAGI (Penetration testing Artificial General Intelligence) is a fully autonomous AI agent system that performs complex penetration testing tasks for you.
- 12.9K
#2 · 0x4m4/hexstrike-aihexstrike-ai
HexStrike AI MCP Agents is an MCP server that lets AI agents like Claude, GPT, or Copilot autonomously run 150+ real cybersecurity tools for automated pentesting, bug bounty hunting, CTF challenges, and vulnerability discovery.
- 7.8K
#3 · AIPentest/CyberStrikeAICyberStrikeAI
CyberStrikeAI is an AI-native cybersecurity platform that turns natural-language intent into governed, auditable security operations, using agents, 100+ security tools, MCP integration, and attack-chain tracking for authorized penetration testing.
- 4

nono
4.5Knolabs-ai/nono · Rustnono is a zero-setup, zero-latency sandbox that runs AI coding agents (Claude Code, Codex, OpenCode, etc.) with least-privilege access, so they can't touch your SSH keys, cloud credentials, or the rest of your disk by default.
- 5

oss-scanner
1Kanthropics/oss-scanner · DockerfileOSS Scanner is a service run by Anthropic that scans enrolled open-source repositories for security vulnerabilities, building each project in an isolated VM and emailing the maintainer a reproducer plus a proposed patch for anything it finds.
- 6

ai-security-tool
775ZeroDayEvil/ai-security-tool · HTMLAI Security Tool is an open-source, cross-platform terminal and vulnerability scanner that combines a multi-protocol connectivity client (SSH, RDP, VNC, etc.), CVE/SBOM supply-chain auditing, and 12+ autonomous AI agents (DeepSeek, OpenAI) to automate pentesting, Red Team, and CTF workflows.
- 7

VulnHunter
735nealbridges/VulnHunter · PythonAn open-source, agentic AI security scanner that reasons like an attacker to find exploitable vulnerabilities in source code, proves them with executable proof-of-concept exploits, and fixes them test-first. It is a maintained fork of Capital One's VulnHunter, rebuilt to run on any agent harness instead of just Claude Code.
Related topics
Often tagged together
- linux4,184
- security976
- cybersecurity245
- open-source5,666
- ai1,955
- ai-agents1,289
- llm1,483
- macos3,544
- python2,383
- security-tools282
- ai-hacking5
- ai-penetration-testing6
- apache-2.01,434
- docker1,660
- mcp913
- penetration-testing126
- pentesting113
- self-hosted1,929
- vulnerability-scanner43
- web2,447
- windows3,403
- agent-security16
- agentic-ai310
- ai-security44