VulnClaw

Open-source AI penetration-testing agent that runs recon, exploitation and reporting from natural language.

IndexedMIT★ 3,794

Chalk Labs

Need help deploying VulnClaw?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Get started

Setup steps are in the repository. Website · Repository

About

VulnClaw is an open-source penetration-testing agent that runs from a CLI or a local web UI and takes natural-language requests. Its model-driven loop moves through information gathering, vulnerability discovery, exploitation and report generation, and it can produce Markdown reports and Python PoC scripts. It supports 13 LLM provider families, MCP tools for browser automation and HTTP traffic replay, and about 50 security skill references. The README limits use to authorized testing, CTF competitions, security teaching and red-team exercises.

Use cases: security, security-scanning

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Fact sheet

Jobs: securityREADME
Autonomy: Autonomous: runs tasks end to end and reports backREADME
Where you use it: Terminal, WebREADME
Hosting: You run itREADME
Models: openai, anthropic, minimax, deepseek, zhipu, moonshot, qwen, siliconflow, doubao, stepfun, sensetime, openrouter, ollamaREADME
Interfaces: mcp, agent-skillsREADME
Open source: YesREADME

Facts extracted by Claude Haiku 5.5 from the linked sources on Oct 24, 2026. Wrong fact? Tell us.

Signals

Stars: 3,794
Forks: 533
Open issues: 7
Last commit: Oct 5, 2026 (25 days ago)
Last release: Oct 6, 2026 (25 days ago)

From GitHub (fetched Oct 24, 2026).

Details

License: MIT
Repository: github.com/Netw0rkNoob/VulnClaw
Website: unclecheng-li.github.io/vulnclaw.com
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: README github-graphql

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped: 50+; launches shipped
media placements: 500+; media placements
founders on every account: 2; founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get VulnClaw running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Need help deploying VulnClaw?

Call Get help

Cite this page

VulnClaw. Agent Mart. https://agentmart.dev/agents/vulnclaw (last updated 2026-10-24)