Skip to content
WeChat · Goumang Security Lab·Indexed by this site · Originally published

PentAGI breakdown: a 30,000-star self-hosted multi-Agent penetration testing platform and sandbox testing of more than 20 security tools

「AI渗透测试+自主Agent」PentAGI拆解:3万星自托管多Agent+20款安全工具沙箱实测

AI summary

vxcontrol/pentagi is a self-hosted multi-agent autonomous penetration testing platform. Users describe targets in natural language, and the Orchestrator schedules dedicated agents such as Researcher, Developer, and Executor, which call over 20 tools including nmap, Metasploit, and sqlmap inside an isolated Docker sandbox and produce reports. The repository currently has 30,512 stars, 4,585 forks, 33 open issues, uses the MIT license, is primarily written in Go, was created in January 2025, and the latest release is v2.2.0 (2026-10-05). The author is VXControl, a Dubai-based security engineering company. The article also provides configuration requirements for the sandbox and network boundaries, self-hosted installation steps and default passwords, docker.sock permissions, PROXY_URL scope, and a pitfall checklist including Graphiti being disabled by default.

Read originalmp.weixin.qq.com