Guardian CLI — автоматизация пентеста с AI

★ 1.9K

zakirkun/guardian-cli is an open-source penetration testing automation framework that connects 7 AI providers — OpenAI GPT-4o, Claude, Gemini, Ollama, OpenRouter, Requesty, and OpenAI-compatible endpoints — to more than 50 security tools for intelligent, adaptive security assessments. Use it only on systems you own or have explicit written authorization to test; unauthorized access is illegal under the CFAA and equivalent international law. Reach for it when running nmap, nuclei, sqlmap, and dozens of other utilities by hand takes too long, when you need a full infrastructure audit with a structured report, when the scope covers cloud environments, Active Directory, or Android APKs under a single workflow, or when SARIF export directly into GitHub is required. Built in Python 3.11+, deployed via CLI. Core internals include a DAG scheduler with parallel step execution, sandboxed Jinja2 parameter templates, --resume for interrupted sessions, a Red/Blue/Judge multi-agent debate that cuts false positives, Vision-LLM screenshot evidence capture, and a SQLite + FTS5 RAG knowledge base grounded on CVE/CWE/MITRE ATT&CK feeds to suppress hallucinated references. Output integrations: DefectDojo, Slack webhooks, SARIF v2.1.0. The tool performs active offensive testing with AI coordination — not passive monitoring (use a SIEM for that).