Blacksmith
AI powered penetration testing
6 followers
AI powered penetration testing
6 followers
BlacksmithAI is an OPEN-SOURCE advanced penetration testing framework that leverages multiple AI agents to automate security assessments. The system orchestrates specialized agents through a complete penetration testing lifecycle from reconnaissance to post-exploitation using professional security tools in a controlled environment.
Free
Launch Team
AWS Startup AdvisorPersonalized AWS guidance that meets you where you’re already building
Promoted
👋 Hello everyone, I'm the creator of BlacksmithAI, and I'm thrilled to share this project with the Product Hunt community.
What it is:
BlacksmithAI is an open-source, AI-powered framework that automates professional security penetration testing. Think of it as having an intelligent team of security analysts—an "Orchestrator" and specialized agents for Reconnaissance, Scanning, Exploitation, etc.—all working together through a CLI or Web UI to find and validate security vulnerabilities automatically.
Why I built it:
Professional pentesting is complex, time-consuming, and requires deep expertise. I wanted to make advanced security assessment more accessible, faster, and repeatable by leveraging modern AI agents.
Key things you can do right now:
Automate the full pentest lifecycle: From discovery (nmap, subfinder,..) to exploitation (sqlmap,...) and reporting.
Choose your AI backend: Use cloud providers (OpenRouter) or run local models (via vLLM) for privacy. add your own provider(gemini,...). its easy to scale up.
Work in a safe, tool-packed environment: It runs all tools inside a pre-configured Docker container, so there's no messy local install.
Get detailed reports: The Orchestrator agent compiles findings, evidence, and remediation advice into a structured report.
Who it's for:
Anyone who loves trying new apps, Security engineers, DevOps teams, red teams, and developers who want to proactively secure their applications and infrastructure. It's also a great learning tool for anyone interested in security.
Getting started is straightforward:
The quickest way is using the make commands (see README). full cloud-based demo without any setup, is comming soon.
This is an active open-source project. I'd love to hear your feedback, what features you'd like to see next, and any questions you have about how it works!
Links:
GitHub Repo: https://github.com/yohannesgk/bl...
Documentation: In the README and repo wiki.