VulnClaw
VulnClaw is an agent app that runs penetration tests from plain-language requests for security testers working on authorized targets.
What it is good for
- Running penetration tests on authorized targets from plain language
- Finding and verifying web vulnerabilities automatically
- Generating pentest reports and proof-of-concept scripts
At a glance
- Who it is for
- Setup
- Guided command-line setup
Level 4 of 5. You copy and paste commands into a terminal by following the instructions. Comfortable territory for vibe coders.
- Cost
- Free and open source
- Type
- Agent app
- Tasks
- Works with
- OpenAI, Anthropic, DeepSeek, Ollama, MiniMax, OpenRouter
Momentum
- Rank this week
- Not ranked yet
- Best rank
- None yet
- GitHub stars
- 3,852
GitHub numbers as of Nov 2, 2026. Updated weekly.
Official links
Setup steps are on the official pages. We do not repeat them here, since they change.
Questions
- Is VulnClaw free?
- Yes. It is free and open source (MIT license).
- Do I need to know how to code to use VulnClaw?
- You do not need to write code, but setup means copying and pasting commands into a terminal by following its instructions.
- What does VulnClaw work with?
- According to its own documentation, it works with OpenAI, Anthropic, DeepSeek, Ollama, MiniMax, and OpenRouter.
- What is VulnClaw good for?
- Running penetration tests on authorized targets from plain language, finding and verifying web vulnerabilities automatically, and generating pentest reports and proof-of-concept scripts.
Similar agents to VulnClaw
- Chaos Intelligence
Chaos Intelligence is a programming language that treats AI agents as callable functions for developers building multi-step agent workflows.
- daily_stock_analysis
daily_stock_analysis is an agent app that runs daily AI analysis of stocks and sends decision dashboards to chat apps for individual investors.
- AiSOC
AiSOC is a self-hosted agent app that triages and investigates security alerts with AI, recording every step, for teams running their own security operations.
- FrontierAgent
FrontierAgent is an agent app that runs research and file-based work in a terminal, with one agent or a team of parallel sub-agents, for people comfortable with the command line.
- tabularis
Tabularis is a desktop SQL workspace that lets you query databases and connect AI agents like Claude and Cursor to your schema for people who work with databases.
- Radar
Radar is a Kubernetes dashboard with a built-in MCP server that shows what is broken in a cluster and why, for operators and the AI agents helping them.