Cybersecurity toolkits · Rank #23
pentest-harness
Grade B: derived only from the two verdicts below. How grades work
Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring your own AI model API; sessions stay local.
Why this verdict
How we check →- 18 commits in the last 90 days, none in the last 30. receipt ↗
- React 18 declared; latest is 19 (1 major behind). receipt ↗
- Not counted in verdict: TypeScript 6 → 7. receipt ↗
Snapshot: commit 4638f38 on main, checked 2026-10-19 07:54 UTC. Receipts link to files at this exact commit.
Dependency freshness
| Package | Declared | Latest | Status |
|---|---|---|---|
| React react | 18.2.0 | 19.3.1 | 1 major behind |
| TypeScript typescript | 6.0.3 | 7.0.2 | Behind, not counted |
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- Framework
- Vite
- Testing
- Vitest
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- AIOne-click model discovery
one-click model auto-discovery
- AuthSecure credential store
API keys live in an owner-only credential store as references
- OtherFull agent toolset
shell, filesystem, web research, skills, goals, subagents, background jobs, and workflow control
- OtherPlugin architecture
Everything is a plugin — built on Cordis
- UIWeb UI
The Web UI opens at http://127.0.0.1:2323 in your browser
Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 1, 2026. Every item is checked against an exact README quote; 6 unverifiable items were discarded. A README claim is the maker's description, not something we tested.
Watch pentest-harness
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Oct 1, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Steady | 1 major behind | 18 |
| Oct 12, 2026 | Steady | 1 major behind | 18 |
| Oct 1, 2026 | Active | 1 major behind | 18 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (main) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- package.json ↗ declared dependency versions and stack (at commit 4638f38)
- apps/cli/package.json ↗ declared dependency versions and stack (at commit 4638f38)
- apps/web/package.json ↗ declared dependency versions and stack (at commit 4638f38)
- README ↗ quoted features at the checked commit
- npm registry ↗ latest versions (each linked in the table above)
Maintainer? Add the badge
It updates automatically every time we refresh the evidence. Clicking it opens this page.
[](https://kitproof.dev/kits/pentest-harness/)