Skip to content
BreachPilot

Open source · Apache 2.0 · Local-first

Autonomous security assessment. Operator supervised.

Open-source agentic operator for authorized testing — plans, verifies, and reports with evidence, target-locked and audited.

Install BreachPilot View on GitHub

Authorized testing only — safety model · docs

Linux install
curl -fsSL https://breachpilot.dev/install.sh | bash

Illustrative lab run against 127.0.0.1 — BreachPilot tests only allowlisted targets and blocks everything else.

139
advisory skills
153
MCP tools
15
attack families
6
swarm agents
33
tool families

Live counts from the repository catalog.

Why BreachPilot

A full assessment lifecycle, under supervision

Recon to report in one supervised engine, with proof.

Adversarial planning

Structured AttackPlan DAG with retries and failure recovery.

decision_log.jsonl per run

Target-locked execution

Allowlist + mission scope gate on every action.

off-allowlist BLOCKED · SCOPE_DENIED logged

Evidence-based verification

Execution success and evidential success are separate.

CONFIRMED / REFUTED / EXHAUSTED + oracle probes

Domain-aware recon

Domain in, scope-aware attack surface out.

CT / DNS / subfinder · takeover flags

Persistent knowledge

Lessons survive the run.

139 skills · semantic + Bayesian scoring

Operator-supervised

Approval gates, sandbox workers, SHA-256 audit chain.

Read the safety model →

Multi-agent orchestration

Six specialists, one shared blackboard

Parallel dispatch with battle logs and cross-phase negotiation — plus a persistent orchestrator for extended campaigns.

Shared blackboard + battle log

Swarm Orchestrator

parallel dispatch · cross-phase negotiation

  1. recon

    Recon

    Expand surface, stay in scope

  2. vuln

    Vuln

    Match CVEs to capabilities

  3. exploit

    Exploit

    Craft, mutate, execute

  4. post_exploit

    Post Exploit

    Loot and lateral targets

  5. critic

    Critic

    Kill out-of-scope actions

  6. reflection

    Reflection

    Learn for the next run

Explore the swarmSwarm engineering docs

Attack graph

A structured plan, not a prompt chain

Every run builds an AttackPlan DAG — ready/blocked steps and evidence, live in the WebUI graph.

attack plan · dag ready running blocked
  1. Target127.0.0.1 · allowlisted
  2. Reconports · services · OS
  3. HTTP :443fingerprint · WAF check
  4. Web Analysissurface scoring
  5. HypothesisH-03 · testable claim
  6. Verificationoracle probe · evidence
  7. FindingCONFIRMED / REFUTED
  8. Reporttimeline · CVSS · chains

prerequisites · hypotheses · blocked steps · evidence-linked outcomes

Inside BreachPilot

Mission control for the whole run

Loopback-only console at 127.0.0.1:8765 — wizard, stream, graph, evidence and more in one place.

Live Run · illustrative
  • recon › run_full_recon → 4 ports
  • vuln › CVE-2024-xxxx ↔ module 87/100
  • critic › scope PASS · in-allowlist

Live Run

Tool calls and decisions stream over WebSocket.

Run it locally →

Screenshots

The real WebUI

Console captures from a local lab run — not mockups.

Run creation
Target, model, goal and allowlist review before launch.
Attack graph
ReactFlow DAG — ready/blocked steps, hypotheses, evidence links.
Evidence & findings
Confirmed findings with probe output and the SHA-256 audit chain.
Final report
Rendered Markdown/HTML report with MITRE export.

Built for authorized security testing

Only test systems you own or have explicit written permission to assess.

Attack mode auto-approves in-scope actions — the safeties are the target-IP allowlist lock and the mission scope gate, with every action in a tamper-evident audit chain.

Read the safety modelInstall for your lab