pentest-harness

Self-hosted AI agent harness for authorized penetration tests and security labs, using your own model API keys.

Agent by S1N6H

IndexedMIT★ 430

Chalk Labs

Need help deploying pentest-harness?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Get started

Setup steps are in the repository. Repository

About

Pentest Harness is an open-source, self-hosted agent harness for authorized penetration tests, bug bounty research, security labs and CTFs. You connect your own API key from providers such as OpenAI, Anthropic, DeepSeek, Google, Mistral, Groq or OpenRouter, or any OpenAI-compatible gateway, and keys are kept in an owner-only credential store. Its toolset covers shell, filesystem, web research, skills, subagents and background jobs, with sessions saved as JSONL or SQLite. The project is MIT licensed.

Use cases: security, security-scanning

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Fact sheet

Jobs: securityREADME
Where you use it: WebREADME
Hosting: You run itREADME
Models: openai, anthropic, deepseek, google, mistral, groq, openrouter, azure-openaiREADME
Open source: YesREADME
Billing: You pay your model provider directly, using your own API key.README

Facts extracted by Claude Haiku 5.5 from the linked sources on Oct 24, 2026. Wrong fact? Tell us.

Signals

Stars: 430
Forks: 71
Open issues: 1
Last commit: Sep 11, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026).

Details

License: MIT
Repository: github.com/S1N6H/pentest-harness
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: README github-graphql

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped: 50+; launches shipped
media placements: 500+; media placements
founders on every account: 2; founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get pentest-harness running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Need help deploying pentest-harness?

Call Get help

Cite this page

pentest-harness. Agent Mart. https://agentmart.dev/agents/pentest-harness (last updated 2026-10-24)