Open Source
RedAmon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens
Our verdict
We have not reviewed RedAmon yet
No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.
From the listing
About RedAmon
Open-source, self-hosted AI penetration testing framework. It maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens pull requests that fix what it finds. It supports MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
Best for
Security teams wanting an open-source, agent-driven pentesting framework with human oversight
Use cases
- Map an organization's attack surface into a graph for analysis
- Run autonomous penetration tests with human approval checkpoints
- Integrate MCP servers as tools or orchestrate RedAmon from an external agent
Notes
2,918 stars on GitHub. Last updated 2026-10-03. Licensed MIT.
Pros
- Self-hosted and open-source with full control over infrastructure
- Human approval gates reduce risk during autonomous exploitation
- Bidirectional MCP support enables flexible agent integration
Cons
- Requires self-hosting, setup, and ongoing maintenance
- Python-only codebase may limit adoption in non-Python shops
- Community project with no commercial support or SLA
Key facts
What we have checked
- Latest version
- 6.14.1 (released 11 Sept 2026)
- Days since the last commit
- 1
- GitHub forks
- 699
- GitHub stars
- 3,312
- Days to a first reply on issues
- 1.2
- Open issues
- 17
- Releases in the last 90 days
- 2
Each value shows when we last confirmed it and where it came from. Values we have not confirmed are left out, never guessed.
Stars and usage
How RedAmon is growing
2,918 to 3,312
Health and security
Is RedAmon looked after, and what do its setup files show
Health score
77 out of 100
| Part | Points | What we saw |
|---|---|---|
| Recent activity | 30 of 30 | Last push 1 days ago |
| Releases | 11.3 of 15 | 2 releases in 90 days |
| Issue replies | 20 of 20 | First reply in 1.2 days (median) |
| Maintainer | 0 of 15 | Owned by a single user |
| Official source | Not counted | MCP servers only |
Sources
Where this comes from
A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.
Changelog
What changed
Released 6.14.1
Released 6.2.5
Released 6.2.2
Released 6.0.2
Released 5.1.0
Released 5.0.0
Released 4.0.0
Released 3.8.0
Released 3.2.0
Released 3.0.0
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.