LibreAI / Agents / redamon
// agents Β· samugit83/redamon

redamon

Self-hosted AI pentesting agent that finds flaws and opens PRs to fix them.

πŸ’Ž Hidden gemβ˜… 2.9k starsβ‘‚ 597 forksMITupdated 2026-10
β–¦ visual β€” this project's README ships no embeddable screenshot,
so here's a placeholder. The guide below is complete regardless.
// project facts

Project facts

redamon is an open-source agents project by samugit83 (samugit83/redamon on GitHub). It has 2,918 GitHub stars and 597 forks, is released under the MIT license, and was last updated on GitHub on 3 October 2026.

GitHub stars
2,918
Forks
597
License
MIT
Last updated on GitHub
3 October 2026
Category
Agents
Listing
Hidden gem β€” a shorter page for a lesser-known project
Official site
Official site
// how it works

How it works

  1. Define the target

    Scope the systems RedAmon is allowed to test.

  2. Map the attack surface

    It builds a graph of reachable assets.

  3. Approve the exploits

    Autonomous attacks run behind human gates.

  4. Merge the fixes

    RedAmon opens pull requests for the flaws it finds.

// features

Why people love it

Autonomous exploitation

Finds and tests real vulnerabilities.

Kali sandbox

Attacks run in an isolated environment.

Human approval gates

Nothing sensitive runs without a yes.

Auto-fix pull requests

Vulnerabilities become fix PRs.

MCP both ways

Use MCP tools, or drive it via MCP.

Attack-surface graph

A visual map of what is exposed.

Advertisement
// run it

Run it yourself

  1. Step 1 β€” Clone the repo

    Download the source and move into the project folder.

    git clone https://github.com/samugit83/redamon.git
    cd redamon
  2. Step 2 β€” Check the README

    Every project documents its own setup; start with install requirements.

    cat README.md | head -60
  3. Step 3 β€” Run it

    Follow the project’s launch command β€” Docker, pip, npm, or a binary release.

    # see README for the exact launch command
// use cases

What you can build

Advertisement
// faq

Questions, answered

Who maintains RedAmon?

It is an open-source project at samugit83/redamon with 597 forks. Check activity before relying on it.

Is RedAmon free for commercial use?

Yes. MIT licensed.

Is it legal to run?

Only against systems you own or have written permission to test.

Do I need Kali Linux?

Attacks run from a Kali sandbox the framework manages.

Can it really fix what it finds?

It opens PRs with proposed fixes; a human still reviews and merges.

// keep exploring

Similar tools

AI Agents

Anthropic-Cybersecurity-Skills

817 structured cybersecurity skills for AI agents Β· Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fr…

β˜… 33.8k starsApache-2.0
View guide β†’
AI Agents

browser-agent

Open-source, vision-first browser agent

β˜… 4.1k starsApache-2.0
View guide β†’
AI Agents

nanobot

Ultra-lightweight, open-source, self-hosted personal AI agent framework in Python with WebUI, tools, memory, MCP, multi-agent workflows, automation, and chat…

β˜… 48.8k starsMIT
View guide β†’
AI Agents

open-multi-agent

Open Multi Agent β€” a self-hosted TypeScript agent runtime with durable approvals and verifiable run records.

β˜… 7.0k starsMIT
View guide β†’
AI Agents

Rakazo

Rakazo β€” an open-source, self-hosted AI agent for persistent teammates: bring your own model and computer, run it on web, desktop, iPhone and Android

β˜… 4.1k starsApache-2.0
View guide β†’
AI Agents

CoreCoder

Self-hosted ai agents: minimal ai coding agent (~1,000 lines of python) inspir.

β˜… 1.8k starsMIT
View guide β†’
// alternatives

Alternatives in Agents

The most-starred other Agents projects in the LibreAI catalogue β€” the realistic shortlist if redamon is not the right fit.

Get redamon

Free and open β€” grab the source, star the repo, and start creating.