Free downloadPentAGI: AI Agents That Pentest Your Own App
A free guide to PentAGI, an open-source platform where a team of AI agents tests a target like an attacker and writes a report: setup with Docker, cloud or local models, a first test against a practice app on your own machine, reading the report, and the legal rules.
What is inside
- Setup Install with the interactive installer or Docker Compose, then change the default secrets.
- Models Cloud LLM or local model, plus embeddings, tested with ctester and etester.
- Lab OWASP Juice Shop as a practice target on your own machine, bound to localhost.
- First flow Prompts with clear scope rules, from a narrow login check to a full lab test.
- Report Read the report, reproduce every finding yourself, fix and retest with a triage sheet.
- Legal Only systems you own or may test: § 202a ff. StGB, Computer Misuse Act, permission checklist.
Docker and Docker Compose, at least 2 vCPU, 4 GB RAM and 20 GB free disk. One LLM provider: a cloud API key (billed per token by the provider) or a local model via Ollama on strong hardware. Only for systems you own or may test.