# Armur-Ai/Pentest-Swarm-AI

> Open-source XBOW alternative: an autonomous API and web-app pentester where dozens of AI agents run recon, exploitation, and reporting in parallel via a shared blackboard. For pentesters, bug bounty hunters, and red teamers.

- Magnitude: 2.6 out of 10 — Steady
- Stars: 2,611 total · +14 stars today, ≈ 24 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Go · License: AGPL-3.0 · Created: 2024-03-26 · Last push: 2026-09-25
- GitHub: https://github.com/Armur-Ai/Pentest-Swarm-AI · Page: https://gitnova.dev/en/r/Armur-Ai/Pentest-Swarm-AI

## Useful for

- Run an autonomous pentest across a subdomain list overnight
- Test an API for BOLA/IDOR, JWT forgery, and SSRF in a bug bounty scope
- Run the swarm in CTF mode to find and prove vulnerabilities

## Why it’s here

- 14 stars so far today, about 24 expected by the end of the day. The usual pace is 6 per day, so that's 3.8× as much.
- Over the last two days the pace is 4× that of the previous week and a half.
- GitHub Trending Go today: #5, +35 stars.
- Recent forks include notable developers: @attacker-codeninja (209 followers).

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 479
- Issues and pull requests: 73
- Watchers: 21
- Average over the last week: 16 per day
- Usual pace: 6 per day
- Stars in the last hour (measured): 4
- Latest release: v0.2.26 (2026-09-25)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-08-27 … 2026-09-25: 2, 4, 1, 6, 9, 24, 14, 8, 3, 7, 4, 9, 6, 4, 6, 4, 1, 2, 9, 6, 1, 5, 2, 5, 21, 18, 7, 4, 32, 14

## Spotted in now

- GitHub Trending Go today: #5, +35 stars

## Similar by description

1. **Zyrexnn/Cybermes** — 0.2 · Steady · Security · Python · +0 stars today, ≈ 0 by evening
   Framework for automating authorized bug bounty and red teaming: the autonomous Hermes agent performs reconnaissance, orchestrates tools and validates vulnerabilities, and is also available as an MCP server for AI editors.
   Full card: https://gitnova.dev/en/r/Zyrexnn/Cybermes.md
2. **elder-plinius/T3MP3ST** — 1.3 · Steady · Security · TypeScript · +3 stars today, ≈ 5 by evening
   Multi-agent red-teaming platform that turns an existing AI coding agent into a vulnerability-hunting harness, automating the recon → exploit → report kill chain for web apps, CTFs, smart contracts, and source code.
   Full card: https://gitnova.dev/en/r/elder-plinius/T3MP3ST.md
3. **vxcontrol/pentagi** — 1.8 · Cooling · Security · Go · +14 stars today, ≈ 23 by evening
   Autonomous multi-agent system in Go for automated penetration testing: AI agents plan and execute steps in an isolated Docker sandbox with 20+ tools (nmap, metasploit, sqlmap).
   Full card: https://gitnova.dev/en/r/vxcontrol/pentagi.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-09-25 14:45 UTC, updated every 30 minutes.