README

PentAGI


    Penetration testing Artificial General Intelligence




 Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments.

⠀

 

  



 Table of Contents

- Overview
- Features
- Architecture
  - Agent Supervision
- Quick Start
  - Agent Docker Access
  - Running Several Instances
- How to Use PentAGI After Login
- API Access
  - LLM Provider Configuration
    - Azure OpenAI
    - Ollama
    - OpenAI
    - Anthropic
    - Google AI (Gemini)
    - AWS Bedrock
    - DeepSeek
    - GLM
    - Kimi
    - Qwen
    - MiniMax
    - Mistral
    - xAI (Grok)
- Advanced Setup
  - Langfuse Integration
  - Monitoring and Observability
  - Knowledge Graph (Graphiti)
  - OAuth Integration
  - Docker Image Configuration
- Development
- Testing LLM Agents
- Embedding Configuration and Testing
- Function Testing with ftester
- Building
- Credits
- License

 Overview

PentAGI is an open-source, self-hosted multi-agent system for autonomous penetration testing. You describe a target and a goal in plain language; a team of specialized AI agents plans the work, runs 20+ professional tools such as nmap, Metasploit and sqlmap inside an isolated Docker sandbox, remembers what it learned and hands you a report.

- Who it is for. Security engineers, penetration testers, researchers and red teams who want an autonomous assistant on their own infrastructure, for authorized testing only.
- What sets it apart. It runs on your own servers with the model of your choice: 10+ cloud LLM providers, your own OpenAI-compatible gateway, or local models through Ollama or vLLM. Results and successful approaches are kept in PostgreSQL with pgvector for later flows, an optional Neo4j knowledge graph tracks hosts, services and findings, execution monitoring and task planning help smaller open models, and REST and GraphQL APIs automate it. PentAGI Enterprise adds agent profiles, plugins and MCP servers, customer-ready reports and a real-time attack-chain view.
- How to install. An interactive installer for Linux, macOS and Windows sets PentAGI up with Docker Compose — see Quick Start.

PentAGI is developed by VXControl, a security engineering company based in Dubai.

You can watch the video PentAGI overview:


 Features

- Secure & Isolated. All operations are performed in a sandboxed Docker environment with complete isolation.
- Fully Autonomous. AI-powered agent that automatically determines and executes penetration testing steps with optional execution monitoring and intelligent task planning for enhanced reliability.
- Professional Pentesting Tools. Built-in suite of 20+ professional security tools including nmap, metasploit, sqlmap, and more.
- Smart Memory System. Long-term storage of research results and successful approaches for future use.
- Optional Knowledge Graph Integration. Graphiti-powered knowledge graph using Neo4j for semantic relationship trac

Top issues

Discussions

Latest release

---



PentAGI 2.2 — Any Modern LLM, a Contained Sandbox, Unified Web Search, and Multi-Instance Deployment

This release supports the current generation of LLMs with a tested configuration for every provider, closes CVE-2026-14784 with rebuilt sandbox isolation, replaces seven search tools with one intent-driven web_search, and lets several installations share one set of backing services.

⠀

To get an Enterprise Edition license, sign up at console.pentagi.com — new users get one free license there.



---

 Major Features

 Any Modern LLM, With a Tested Configuration

Lan