Open AI offensive-security OS for finding and fixing bugs.
Tools for web apps
HTTP/S applications and APIs.
137 tools indexed
AI-driven single-binary pentest agent from the chainreactors toolkit
AI autonomous penetration-testing platform.
Policy enforcement, sandboxing and audit for autonomous AI agents
Akto
—Open-source API security testing and discovery platform
Image-scaling attacks for multi-modal LLMs.
Proof-of-work web firewall that blocks abusive AI scraper bots.
Mobile and web app information-gathering scanner for pentesters.
Automated external attack-surface mapping.
Single sign-on and multi-factor authentication portal for web apps.
BBOT
—Recursive internet scanner for recon and attack-surface mapping.
Account search across 600+ networks.
MCP security-audit toolbelt for reconnaissance, analysis and validation.
Cloud-native open-source WAF.
Drive Burp Suite from an LLM.
Intercepting proxy for web application testing.
Fast CORS misconfig scanner.
CeWL
—Custom wordlist generator.
Web vulnerability scanner with custom POCs.
OS command-injection exploitation.
Unified username, email and phone OSINT with evidence graphs.
Cook
—Wordlist framework for hackers.
The cyber Swiss army knife.
AI-native platform that orchestrates security tools from natural language.