Agentic-Bug-Hunter
Agentic-Bug-Hunter is a terminal tool that runs bug bounty recon and vulnerability hunting, then writes submission-ready reports for security bounty programs.
What it is good for
- Finding reportable security bugs on a target website
- Mapping the attack surface of a web target
- Writing bug bounty reports for HackerOne or Bugcrowd
- Running security testing from the terminal with free AI models
At a glance
- Who it is for
- Setup
- Guided command-line setup
Level 4 of 5. You copy and paste commands into a terminal by following the instructions. Comfortable territory for vibe coders.
- Cost
- Free and open source
- Type
- Agent app
- Tasks
- Works with
- Claude Code, Ollama, Groq, DeepSeek, OpenRouter, HackerOne
Momentum
- Rank this week
- Not ranked yet
- Best rank
- None yet
- GitHub stars
- 5,536
GitHub numbers as of Nov 2, 2026. Updated weekly.
Official links
Setup steps are on the official pages. We do not repeat them here, since they change.
Questions
- Is Agentic-Bug-Hunter free?
- Yes. It is free and open source (MIT license).
- Do I need to know how to code to use Agentic-Bug-Hunter?
- You do not need to write code, but setup means copying and pasting commands into a terminal by following its instructions.
- What does Agentic-Bug-Hunter work with?
- According to its own documentation, it works with Claude Code, Ollama, Groq, DeepSeek, OpenRouter, and HackerOne.
- What is Agentic-Bug-Hunter good for?
- Finding reportable security bugs on a target website, mapping the attack surface of a web target, writing bug bounty reports for HackerOne or Bugcrowd, and running security testing from the terminal with free AI models.
Similar agents
- OpenShell
OpenShell is a self-hosted runtime that lets autonomous AI agents run in isolated sandboxes with set limits on files, network, and credentials for developers and technical teams.
- Agenvoy
Agenvoy is a self-hosted agent that runs on your own computer and completes multi-step work like research and file tasks for people who want results, not just answers.
- rtk
rtk is a command-line proxy that shrinks the output of developer commands before an AI coding agent reads it, to cut token costs.
- DeerFlow
DeerFlow is an open-source super agent that researches topics, writes code, and creates content over tasks that take minutes to hours, for people who need multi-step work done.
- goose
goose is an agent app that runs on your computer and handles coding, research, writing, and automation tasks for developers and power users.
- herdr
herdr is a terminal app that keeps your coding agents running in the background and shows which ones need your answer for developers running several coding agents.