knowbe4/frieren-dast-ai

Vibe Coding? Cool story. But your vibe might be "security breach waiting to happen." Introducing VibePenTester, the AI pen-tester who rolls its eyes at your half-baked code, discovers your vulnerabilities faster than your coworkers discover free pizza, and gently bullies your web app into compliance. Less "vibe check," more "reality check."

A web security workbench built for AI agents.

Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding agents.

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

AI-powered offensive security testing using autonomous agents, directly in your terminal.

AI powered web security testing for authorized targets

Agentic web-scanning engine with a terminal workspace, specialist tools, browser validation, reports, REST and MCP.

Watchtower is a simple AI-powered penetration testing automation CLI tool that leverages LLMs and LangGraph to orchestrate agentic workflows that you can use to test your websites locally. Generate useful pentest reports for your websites.