Pencheff

What it does

The open-source, all-in-one security platform. LLM RedTeam, AI, DAST, SAST, VAPT, API security, CNAPP (KSPM/KIEM/CWPP/ASPM), AI red teaming + AI-SPM, SBOM, IaC, and compliance (OWASP / PCI-DSS / SOC 2 / ISO 27001 / NIST / HIPAA) — one workflow, audit-grade evidence. Free, forever, and self-hostable under the GNU AGPL-3.0 licence.

The open-source, all-in-one security platform. DAST, SAST, VAPT, API security, CNAPP (KSPM/KIEM/CWPP/ASPM), AI red teaming + AI-SPM, SBOM, IaC, and compliance (OWASP / PCI-DSS / SOC 2 / ISO 27001 / NIST / HIPAA) — one workflow, audit-grade evidence. Free, forever, and self-hostable under the GNU AGPL-3.0 licence.

41 target types across eight surfaces, mapped to security disciplines, examined by the full capability stack, and delivered as one audit-grade report — the whole platform, before you scroll. Pencheff is the all-in-one security platform — built around three orthogonal commitments: methodology, coverage, and reporting. Each is enforced by the engine, not the operator. Pencheff follows an adversarial methodology modelled on manual penetration testing — reconnaissance, authenticated coverage, business-logic probing, and exploit chaining — delivered with the consistency of automation. Injection, access control, authentication, cryptography, client-side, infrastructure, cloud, and API — examined…from pencheff.com

• 
  Astra Autonomous PentestJun 2026 · getastra.com · ▲406

  AI agents that find, validate, and fix every vulnerability

• 
  Pentest Copilot by BugBase2023 · copilot.bugbase.ai · ▲316

  Your ultimate AI-powered ethical hacking assistant

• 
  DarkmoonJun 2026 · dark-moon.org · ▲98

  Autonomous penetration testing platform

• 
  Pentesting Bot2024 · geneau.gumroad.com · ▲54

  A powerful automated security testing tool

• 
  Automated red teaming for your LLM app2024 · promptfoo.dev · ▲23

  Hi HN, I built this open-source LLM red teaming tool based on my experience scaling LLMs at a big co to millions of users... and seeing all the bad things people did. How it works: - Uses an unaligned model to create toxic inputs - Runs these inputs through your app using different techniques: raw, prompt injection, and a chain-of-thought jailbreak that tries to re-frame the request to trick the LLM. - Probes a bunch of other failure cases (e.g. will your customer support bot recommend a competitor? Does it think it can process a refund when it can't? Will it leak your user's address?) -…

• 
  Promptfoo – CLI for testing & improving LLM prompt quality2023 · github.com · ▲14

  Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic. - promptfoo/promptfoo

• 
  Spira Maxima▲578

  Video model that turns script into viral social media videos

  AI · 18d ago · spira.ai

• 
  Rill Browser▲540

  The browser where Claude Code and Codex work beside you

  AI · 18d ago · rill.love

• 
  Germany's new sovereign AI model Kolibri▲424

  Kolibri is Aleph Alpha

  AI · 19d ago · tej.as

• 
  Giving Opus 5.5 a simulated paint canvas▲392

  Paintings by AI models: programs run through a simulation of oil paint.

  AI · 21d ago · stillwet.art

• 
  PixVerse R2▲381

  A real-time world model you can explore and change

  AI · 30d ago · world.pixverse.video

• 
  Beam.win▲378

  Run AI agents on one Mac and use its windows on another

  AI · 4d ago · beam.win

• TL
  The load-bearing vocabulary of Claude▲710

  Life & fun · Aug 2026 · louisabraham.github.io

• 
  Hey Noah▲656

  A proactive AI executive assistant for founders

  AI · Aug 2026 · heynoah.io

• 
  Clipto MCP▲655

  Hey HN, We recently built Clipto. It’s a tool that lets you search over terabytes of video, audio, and images on your computer, without relying on the cloud. Motivation: we probably all had this similar experience, we know a moment exists in a video or audio, but finding it takes hours scrubbing the timeline. You can send all the media to process in the cloud, but it’s slow, expensive and raises privacy concerns. So we decided to build our own on-device media search engine. How it works (high level): 1. We ingest video, audio, image; normalize formats via ffmpeg; run content analysis to…

  Work · Aug 2026 · clipto.com

• 
  Simple algorithm and color space to generate diverse skin tones▲627

  Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…

  Life & fun · Aug 2026 · toneyalexander.github.io

• 
  AdAnt AI▲620

  Claude for viral, high-converting social ads

  AI · Aug 2026 · adant.ai

• 
  Astute▲606

  Automate your B2B brand going viral, with new media creators

  AI · Aug 2026 · company-app.joinastute.com