AutoPentest AI
Automated web application penetration testing framework implementing OWASP WSTG methodology.
AutoPentest AI is an agentic penetration testing system that automates web application security testing using the OWASP Web Security Testing Guide (WSTG). It crawls target applications, maps endpoints, and spawns parallel agents to test for vulnerabilities including XSS, SQL injection, SSRF, SSTI, and IDOR. The system bundles pre-configured security tools such as nuclei, sqlmap, dalfox, katana, ffuf, and nmap within a Docker container, and integrates Playwright for browser-based testing of DOM XSS, clickjacking, and JavaScript-rendered authentication flows.
Source
Repository: https://github.com/bhavsec/autopentest-ai
Maintain AutoPentest AI?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[](https://getagentictools.com/mcp/bhavsec-autopentest-ai?ref=badge) Related mcp
PostgreSQL Database Manager Integrates with PostgreSQL databases to enable schema management, data migration, performance monitoring, and security configurati
Python Code Execution Provides secure Python code execution in a sandboxed Pyodide environment with automatic dependency installation, stdout/stderr cap
Mermaid Renders Mermaid diagrams in real-time with live preview capabilities, automatic browser refresh, and WebSocket-based updates, supp
DuckDB Execute SQL queries and analyze data in DuckDB databases.
OpenStreetMap Enhances LLM capabilities with location-based services and geospatial data from OpenStreetMap.
CrowdSentinel AI-powered threat hunting and incident response framework for Elasticsearch and OpenSearch with detection rules, EVTX analysis, an