r

redamon

An open-source, self-hosted AI-powered penetration testing framework that autonomously maps attack surfaces and performs vulnerability exploitation.

🌍 OverseasFreeOpen sourceDev开源自动化安全测试
Platforms: WebAPI
Region
Overseas
Pricing
Free
Open source
Yes
GitHub Stars
★ 2.9k
Views
1
Source
GitHub
Added
2026-10-02
Last verified
2026-10-02
redamon

Overview

RedAmon is an open-source, self-hosted AI penetration testing framework. It can map your attack surface into a graph and autonomously perform vulnerability exploitation from a Kali sandbox environment, with human approval required at critical steps. RedAmon can also automatically fix discovered issues and submit PRs. The framework supports bidirectional MCP communication, allowing integration with any MCP server as a tool, or driving RedAmon via Claude Code or your own proxy. Suitable for security researchers and developers to efficiently conduct security testing and vulnerability remediation.

Key features

  • ▪Autonomous attack surface mapping and vulnerability exploitation
  • ▪Human approval required at critical steps
  • ▪Automatic issue fixing and PR submission
  • ▪Supports bidirectional MCP communication

Use cases

Internal enterprise security testingDeveloper code auditingSecurity research and education

Pros

  • +Highly automated
  • +Supports human intervention
  • +Rich integration with security tools

Limitations / notes

  • -Requires some security knowledge
  • -Higher learning curve

Who it's for

Security researchersDevelopersEnterprise teams

This overview was compiled by AI from public sources and may contain inaccuracies — please refer to the official site.

FAQ

Is it free?

Yes, RedAmon is an open-source project and available for free use.

Do I need scientific internet access?

Not required, but you may need access to GitHub and other related resources.

Is Chinese support available?

Main documentation is in English; no Chinese support is currently available.

Can it be used commercially?

Yes, but please comply with relevant laws, regulations, and disclaimers.

Similar agents

Something wrong? Let us know on the About page and we'll fix it.