• Picks
  • Discover
  • Alternatives
  • About

© 2026 Willet

  • Newsletter
  • About
  • FAQ
  • Terms
  • Privacy & Cookies
Join the Discord (opens in a new tab)
Netw0rkNoob avatar

VulnClaw

AI agent that runs authorized penetration tests from plain language

  • Security testing and OSINT
  • AI apps
View on GitHub
Website

What it is

VulnClaw is a command-line AI agent that drives penetration testing from recon through vulnerability discovery, exploitation, and report generation based on natural-language goals. It works with OpenAI-compatible and local models, uses an MCP tool chain for fetching, browser automation, and HTTP replay, and includes encoding, payload, and source-recovery helpers plus structured reports with runnable Python PoCs. Built for authorized pentesters, red teams, CTF players, and security instructors, it also offers a TUI and local web UI.

Images

Facts

Stars
3,760 GitHub stars.
3,760

Forks
527
Commits
546
Contributors
27
Language
Python
License
MIT
Last commit
Oct 5, 2026
On GitHub since
April 2026
First release
April 2026
Platforms
web, macOS, Windows, Linux, CLI, self-hosted
Self-hostable
Yes
Tags
  • mcp-server
  • penetration-testing
  • ai-agents
  • local-ai
  • vulnerability-scanning

Last synced from GitHub on Oct 20, 2026

The 10 best overlooked open-source projects, every Monday.

Share and more

Comments

No comments yet. Start the conversation.

Similar projects

  • Strix avatar

    Strix

    AI agents that pentest your app and confirm bugs with working exploits

    70.3k
  • Keygraph avatar

    Shannon

    Finds and proves web app and API vulnerabilities with real exploits

    49.1k
  • AIPentest avatar

    CyberStrikeAI

    AI agents for authorized penetration testing and security operations

    7.9k
  • VXControl avatar

    PentAGI

    Self-hosted AI agents that run autonomous penetration tests

    31.5k