Cybersecurity toolkits
Defensive and testing toolkits, checked for how well they are maintained. Ranked by grade, then maintenance and dependency freshness. Method. Evidence checked .
| # | Kit | Grade | Verdict | Commits (90d) | Last activity | Model |
|---|---|---|---|---|---|---|
| 1 | 0 | A | ActiveCurrent deps | 1368 | Oct 16, 2026 | Free |
| 2 | violin | A | ActiveCurrent deps | 219 | Oct 13, 2026 | Free |
| 3 | flounder | A | ActiveCurrent deps | 134 | Oct 5, 2026 | Free |
| 4 | attackgen | A | ActiveCurrent deps | 54 | Oct 13, 2026 | Free |
| 5 | pentest-ai | A | ActiveCurrent deps | 36 | Oct 7, 2026 | Free |
| 6 | Exegol | A | ActiveCurrent deps | 22 | Oct 17, 2026 | Free |
| 7 | Wazuh-Autopilot | A | ActiveCurrent deps | 22 | Sep 24, 2026 | Free |
| 8 | grapefruit | A | ActiveCurrent deps | 20 | Oct 6, 2026 | Free |
| 9 | Zen-Ai-Pentest | A | SteadyCurrent deps | 94 | Aug 1, 2026 | Free |
| 10 | sample-agentic-attack-tree-generator | A | SteadyCurrent deps | 13 | Aug 1, 2026 | Free |
| 11 | redcell | B | Active1 major behind | 3044 | Oct 6, 2026 | Free |
| 12 | pentestagent | B | Active1 major behind | 15 | Sep 21, 2026 | Free |
| 13 | watchtower | B | Active1 major behind | 6 | Oct 14, 2026 | Free |
| 14 | redamon | B | ActiveDeps unknown | 928 | Oct 18, 2026 | Free |
| 15 | cain-agent | B | ActiveDeps unknown | 423 | Oct 14, 2026 | Free |
| 16 | wildbox | B | ActiveDeps unknown | 278 | Oct 17, 2026 | Free |
| 17 | Agentic-Bug-Hunter | B | ActiveDeps unknown | 114 | Oct 9, 2026 | Free |
| 18 | Claude-BugHunter | B | ActiveDeps unknown | 107 | Oct 18, 2026 | Free |
| 19 | open-reverselab | B | ActiveDeps unknown | 56 | Oct 15, 2026 | Free |
| 20 | agentic-threat-hunting-framework | B | ActiveDeps unknown | 27 | Oct 2, 2026 | Free |
| 21 | Secrover | B | ActiveDeps unknown | 16 | Oct 4, 2026 | Free |
| 22 | setup_hack_env | B | ActiveDeps unknown | 3 | Sep 27, 2026 | Free |
| 23 | pentest-harness | B | Steady1 major behind | 18 | Sep 11, 2026 | Free |
| 24 | Cybermes | B | SteadyDeps unknown | 224 | Sep 16, 2026 | Free |
| 25 | cyberful | B | SteadyDeps unknown | 96 | Aug 24, 2026 | Free |
| 26 | hackingBuddyGPT | B | SteadyDeps unknown | 69 | Sep 13, 2026 | Free |
| 27 | recon-skills | B | SteadyDeps unknown | 35 | Sep 1, 2026 | Free |
| 28 | communitytools | B | SteadyDeps unknown | 12 | Jul 29, 2026 | Free |
| 29 | pentestkit | B | SteadyDeps unknown | 5 | Jul 31, 2026 | Free |
| 30 | Frida-Script-Runner | B | SteadyDeps unknown | 2 | Aug 15, 2026 | Free |
| 31 | automated-forensic-orchestrator-for-amazon-ec2 | B | SteadyDeps unknown | 2 | Sep 2, 2026 | Free |
| 32 | fluffy-barnacle | B | SteadyDeps unknown | 1 | Jul 23, 2026 | Free |
| 33 | AiSOC | C | Active2+ majors behind | 982 | Oct 17, 2026 | Free |
| 34 | vigil | C | Active2+ majors behind | 827 | Oct 19, 2026 | Free |
| 35 | hackagent | C | Active2+ majors behind | 237 | Sep 21, 2026 | Free |
| 36 | open-kritt | C | Steady2+ majors behind | 107 | Sep 15, 2026 | Free |
| 37 | AutoRedTeam-Orchestrator | C | Steady2+ majors behind | 54 | Sep 17, 2026 | Free |
| 38 | mantis | C | Slowing1 major behind | 0 | Jul 7, 2026 | Free |
| 39 | ThreatIngestor | C | SlowingDeps unknown | 0 | May 26, 2026 | Free |
| 40 | pentest-agents | C | SlowingDeps unknown | 0 | May 6, 2026 | Free |
| 41 | agentseal | C | SlowingDeps unknown | 0 | Jun 11, 2026 | Free |
| 42 | cyber-neo | C | SlowingDeps unknown | 0 | Jul 18, 2026 | Free |
| 43 | OctoC2 | C | SlowingDeps unknown | 0 | Jul 18, 2026 | Free |
| 44 | RedteamAgent | C | SlowingDeps unknown | 0 | May 10, 2026 | Free |
| 45 | passive-ssh | C | SlowingDeps unknown | 0 | May 11, 2026 | Free |
| 46 | mobile-pentest-toolkit | C | SlowingDeps unknown | 0 | May 15, 2026 | Free |
| 47 | PentestOPS | D | Slowing2+ majors behind | 0 | May 22, 2026 | Free |
| 48 | pocsuite3 | D | DormantDeps unknown | 0 | Feb 19, 2025 | Free |
| 49 | PlumHound | D | DormantDeps unknown | 0 | Nov 15, 2025 | Free |
| 50 | PurpleCloud | D | DormantDeps unknown | 0 | Mar 21, 2025 | Free |
| 51 | aws-cloudsaga | D | DormantDeps unknown | 0 | Jan 28, 2025 | Free |
| 52 | msInvader | D | DormantDeps unknown | 0 | Oct 12, 2025 | Free |
| 53 | red-run | D | DormantDeps unknown | 0 | Apr 1, 2026 | Free |
| 54 | typedb-cti | D | DormantDeps unknown | 0 | Jan 8, 2026 | Free |
| 55 | Script | D | DormantDeps unknown | 0 | Aug 21, 2025 | Free |
| 56 | pwncloudos | D | DormantDeps unknown | 0 | Apr 10, 2026 | Free |
| 57 | kitsec-core | F | Dormant2+ majors behind | 0 | Sep 23, 2023 | Free |
| 58 | viper | F | Dormant2+ majors behind | 0 | Aug 13, 2025 | Free |
| 59 | Z3r0 | F | Archived1 major behind | 16 | Sep 4, 2026 | Free |
Paid kits with no public repository show "Not verifiable" until the vendor shares evidence. That is a gap in what we can see, not a judgment of quality.