0xSteph/pentest-ai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

About the project

ptai is an AI tool for authorized web application penetration testing that keeps findings as candidates until machine-controlled checks reproduce the exploit and create replayable proof. Security testers and bug bounty researchers use it with coding-agent clients or its standalone CLI to verify vulnerabilities.

Latest release v1.4.0 · 2 Sept 2026

These files are 0xSteph/pentest-ai's own configuration. They tell Codex and OpenCode how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.

1,652Stars on the repository
1Files it configures its agents with
793Tokens loaded in every session
2Agents configured

Instructions