LibreAI / Automation / reaper
// automation Β· ghostsecurity/reaper

reaper

Validation proxy that helps testers probe live web apps for vulnerabilities.

πŸ’Ž Hidden gemβ˜… 885 starsβ‘‚ 92 forksApache-2.0updated 2026-03
β–¦ visual β€” this project's README ships no embeddable screenshot,
so here's a placeholder. The guide below is complete regardless.
// project facts

Project facts

reaper is an open-source automation project by ghostsecurity (ghostsecurity/reaper on GitHub). It has 885 GitHub stars and 92 forks, is released under the Apache-2.0 license, and was last updated on GitHub on 24 March 2026.

GitHub stars
885
Forks
92
License
Apache-2.0
Last updated on GitHub
24 March 2026
Category
Automation
Listing
Hidden gem β€” a shorter page for a lesser-known project
Official site
Official site
// how it works

How it works

  1. Install Reaper

    Set up the proxy from the repo.

  2. Point traffic at it

    Route your test traffic through the proxy.

  3. Probe the app

    Interact with the target and inspect requests.

  4. Validate findings

    Confirm suspected vulnerabilities live.

// features

Why people love it

Live validation

Tests vulnerabilities against real running apps.

Proxy design

Sits inline to inspect and modify traffic.

Web app focus

Built for application-layer security testing.

AI-assisted

Part of an agentic security toolset.

Go performance

Fast proxying with low overhead.

Open source

Inspectable tooling for security workflows.

Advertisement
// run it

Run it yourself

  1. Step 1 β€” Clone the repo

    Download the source and move into the project folder.

    git clone https://github.com/ghostsecurity/reaper.git
    cd reaper
  2. Step 2 β€” Check the README

    Every project documents its own setup; start with install requirements.

    cat README.md | head -60
  3. Step 3 β€” Run it

    Follow the project's launch command β€” Docker, pip, npm, or a binary release.

    # see README for the exact launch command
// use cases

What you can build

Advertisement
// faq

Questions, answered

Is Reaper a vulnerability scanner?

It is a validation proxy for testing suspected issues, not a passive scanner.

Is reaper free for commercial use?

Apache 2.0 licensed β€” commercial use allowed with attribution.

Can I test any website with it?

Only systems you own or have explicit permission to test.

Does it need installation on the target?

No, it runs as a proxy on the tester's side.

Who maintains it?

Ghost Security's open-source security tooling effort.

// keep exploring

Similar tools

AI Agents

Anthropic-Cybersecurity-Skills

817 structured cybersecurity skills for AI agents Β· Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fr…

β˜… 33.8k starsApache-2.0
View guide β†’
Automation

agent-toolkit

A curated collection of skills for AI coding agents. Skills are packaged instructions and scripts that extend agent capabilities across development, document…

β˜… 2.5k starsMIT
View guide β†’
Automation

CodeMachine-CLI

CodeMachine is an open-source tool that orchestrates AI coding agents into repeatable, long-running workflows. ⚑️

β˜… 2.5k starsApache-2.0
View guide β†’
Automation

agent-skills

Skills giving AI agents live web data via search and extraction.

β˜… 57 starsMIT
View guide β†’
Automation

python-scrapfly

Official Python SDK designed for the Scrapfly platform: web scraping.

β˜… 62 starsNOASSERTION
View guide β†’
Automation

laravel-scrapingbee

Laravel-scrapingbee, in PHP β€” built for php laravel library for scrapingbee web scrapin...

β˜… 43 starsMIT
View guide β†’
// alternatives

Alternatives in Automation

The most-starred other Automation projects in the LibreAI catalogue β€” the realistic shortlist if reaper is not the right fit.

Get reaper

Free and open β€” grab the source, star the repo, and start creating.