samugit83/

redamon

GitHub

RedAmon is an autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, triages findings, fixes code, and opens PRs with human oversight. It uses Docker and OpenVAS options and provides a multi-agent recon flow.

2.3kstars

462forks

13issues

MITlicense

2025since

Star historydaily snapshots by VibeCrowd

Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).

Alternatives & relatedmatched by topic overlap

mukul975/

Anthropic-Cybersecurity-Skills

▲ 470/wk

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

27k3.3kPython

usestrix/

strix

▲ 2.6k/wk

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

48k5.1kPython

KeygraphHQ/

shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

46k5.4kTypeScriptgiant

SWE-agent/

SWE-agent

SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]

20k2.2kPython

GreyDGL/

PentestGPT

Automated Penetration Testing Agentic Framework Powered by Large Language Models

15k2.6kPython

aliasrobotics/

cai

Cybersecurity AI (CAI), the framework for AI Security

9.6k1.4kPython

Compareredamon vs Anthropic-Cybersecurity-Skills redamon vs strix redamon vs shannon

Reviewgenerated from repository data · Aug 5, 2026

What it is

RedAmon is an autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then triages findings, implements code fixes, and opens pull requests on your repository. From first packet to merged patch, with human oversight at every critical step.

How it works

It launches multiple reconnaissance tools in parallel, feeds results into a shared knowledge graph in real time, and uses AI triage to rank findings by exploitability. A CodeFix agent clones the repository, navigates the codebase with 11 code-aware tools, implements targeted fixes, and opens a GitHub pull request.

Getting started

Prerequisites include Docker and Docker Compose v2+.

Clone & Install

git clone https://github.com/samugit83/redamon.git
cd redamon

# Without GVM (lighter, faster startup):
./redamon.sh install

# With GVM / OpenVAS (full stack, ~30 min first run):
./redamon.sh install --gvm

The script builds all images and starts the services.

Create Admin Account At the end of the install, you will be prompted to create an admin. You can also run:

./redamon.sh create-admin

If you forget the admin password, you can reset or re-create via:

./redamon.sh reset-password
./redamon.sh create-admin

Configure Open http://localhost:3000/settings to configure providers and API keys. No .env file is needed.

LLM Providers: add API keys for OpenAI, Anthropic, OpenRouter, AWS Bedrock, or OpenAI-compatible endpoints. The model selector fetches available models from configured providers.
API Keys: keys for Tavily, Shodan, SerpAPI, NVD, Vulners, URLScan, and threat intel services to enable extended agent capabilities.

Recent releases

Latest releases include v6.2.5 (2026-07-28) with LAN WebSocket + Neo4j Auth Fixes, v6.2.2 (2026-07-25) Agent File-Download Hardening, v6.0.2 (2026-07-15) Parallel-Scan Stability, v5.1.0 (2026-06-25) Security Hardening, and v5.0.0 (2026-06-24) AI Gauntlet.

Traction

GitHub Stars: 2265

Caveats

License: MIT Created: 2025-12-29 Last push: 2026-08-01

SharePost on X LinkedIn