Cybersecurity toolkits · Rank #4
attackgen
Grade A: derived only from the two verdicts below. How grades work
AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.
Why this verdict
How we check →- 54 commits by 3 contributors in the last 90 days (15 in the last 30). receipt ↗
- Latest release v0.17.0, 20 days ago. receipt ↗
- On current major: Streamlit. receipt ↗
Snapshot: commit 3add5f1 on main, checked 2026-10-19 07:02 UTC. Receipts link to files at this exact commit.
Dependency freshness
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- Framework
- Streamlit
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- AIThreat actor scenarios
Generates unique incident response scenarios based on chosen threat actor groups or ATLAS case studies.
- AIAI insider threat scenarios
Generate **AI Insider Threat Scenarios** - incident response exercises in which a frontier AI agent deployed inside your organisation behaves as an insider threat
- AIAttackGen Assistant chat
AttackGen Assistant - a chat interface for updating and/or asking questions about generated scenarios, with a direct route back to the page the scenario came from.
- AIMulti-provider model support
Use the OpenAI API, Anthropic API (Claude models), Google AI API, Mistral API, Groq API, or any custom OpenAI-compatible endpoint (Ollama, LM Studio, Azure OpenAI, OpenRouter, etc.) to generate incide
- AnalyticsScenario feedback capture
Capture user feedback on the quality of the generated scenarios.
- ContentScenario templates
Use scenario templates to quickly generate custom scenarios based on common types of cyber incidents, including AI/ML-specific attack patterns.
- ContentMarkdown downloads
Downloadable scenarios in Markdown format.
- OtherOrganisation tailoring
Allows you to specify your organisation's size and industry for a tailored scenario.
- OtherMITRE ATT&CK and ATLAS
Supports MITRE ATT&CK Enterprise, ICS (Industrial Control Systems), and ATLAS (Adversarial Threat Landscape for AI Systems) frameworks.
- OtherTechnique listing
Displays a detailed list of techniques used by the selected threat actor group or case study.
- OtherCustom technique scenarios
Create custom scenarios based on a selection of ATT&CK or ATLAS techniques.
- UIGuided setup readiness
every page shows the same **Setup** sidebar, lists every outstanding requirement in one readiness summary, and keeps **Generate** disabled until the workflow is ready.
- UISession result persistence
each scenario page keeps its own latest result, its captured inputs and its downloads across reruns and navigation
- UIScenario summary navigation
Long scenarios come with a compact summary and section navigation, including shortcuts to the injects, success criteria, metrics, artefacts and rules of engagement a facilitator runs the exercise from
Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.
Watch attackgen
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Active | Current deps | 54 |
| Oct 12, 2026 | Active | Current deps | 60 |
| Sep 29, 2026 | Active | Current deps | 56 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (main) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- pyproject.toml ↗ declared dependency versions and stack (at commit 3add5f1)
- requirements.txt ↗ declared dependency versions and stack (at commit 3add5f1)
- README ↗ quoted features at the checked commit
- PyPI ↗ latest versions of Python packages (each linked in the table above)