Cybersecurity toolkits · Rank #9
Zen-Ai-Pentest
Grade A: derived only from the two verdicts below. How grades work
🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️
Why this verdict
How we check →- 94 commits in the last 90 days, none in the last 30. receipt ↗
- Latest release v3.0.0, 241 days ago. receipt ↗
- On current major: Pydantic. receipt ↗
- Not counted in verdict: FastAPI 0 → 0. receipt ↗
Snapshot: commit a32344d on main, checked 2026-10-19 07:09 UTC. Receipts link to files at this exact commit.
Dependency freshness
| Package | Declared | Latest | Status |
|---|---|---|---|
| FastAPI fastapi | 0.115.8 | 0.146.0 | Behind, not counted |
| Pydantic pydantic | 2.0.0 | 2.14.1 | Current |
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- Framework
- FastAPI
- API layer
- Pydantic, Uvicorn
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- AIAutonomous AI ReAct pattern
ReAct Pattern: Reason → Act → Observe → Reflect
- AIAI state machine
State Machine: IDLE → PLANNING → EXECUTING → OBSERVING → REFLECTING → COMPLETED
- AIAI memory system
Memory System: Short-term, long-term, context windows
- AISelf-correction and adaptive planning
Self-Correction: Retry logic & adaptive planning
- AIHuman-in-the-loop pause
Human-in-the-Loop: Optional pause for critical decisions
- AnalyticsFalse positive reduction
False Positive Reduction: Bayesian + multi-model voting
- AnalyticsBusiness impact scoring
Business Impact: Financial, compliance, reputation scoring
- AnalyticsCVSS/EPSS assessment
CVSS/EPSS: Industry-standard vulnerability assessment
- AnalyticsLLM voting consensus
LLM Voting: Multi-model consensus for accuracy
- AnalyticsPriority ranking
Priority Ranking: Automated finding prioritization
- TestingSandboxed exploit execution
Sandboxed Execution: Docker isolated testing
- Testing4-level safety controls
4-Level Safety: Read-Only → Full exploitation
- TestingEvidence collection
Evidence Collection: Screenshots, HTTP captures, PCAP
- TestingChain of custody audit trail
Chain of Custody: Complete audit trail
Extracted from the kit's README by a local AI model (deepseek-flash) on Sep 29, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.
Watch Zen-Ai-Pentest
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Steady | Current deps | 94 |
| Oct 12, 2026 | Steady | Current deps | 98 |
| Sep 29, 2026 | Steady | Current deps | 98 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (main) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- pyproject.toml ↗ declared dependency versions and stack (at commit a32344d)
- requirements-lock.txt ↗ declared dependency versions and stack (at commit a32344d)
- requirements-minimal.txt ↗ declared dependency versions and stack (at commit a32344d)
- requirements-security.txt ↗ declared dependency versions and stack (at commit a32344d)
- README ↗ quoted features at the checked commit
- PyPI ↗ latest versions of Python packages (each linked in the table above)