Ross ROSS = Recommend OSS · open-source software intelligence for agents

0x4m4/hexstrike-ai

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities. observed · 2026-08-28

github.com/0x4m4/hexstrike-ai · homepage · Python · MIT (permissive) observed · 2026-08-28

Health v2 · maintenance only

61/100

  • Activity 95
  • Release rhythm 35
  • Longevity 29

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 419
  • days_rel: n/a
  • days_push: 30
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

11381 stars · 2371 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

HexStrike AI is an MCP server that bridges LLM agents (Claude, GPT, Copilot) with 150+ cybersecurity tools for autonomous penetration testing and vulnerability discovery. It provides a multi-agent architecture with specialized agents for bug bounty, CTF solving, CVE intelligence, and exploit generation.

Use cases

  • automate penetration testing with AI agents
  • run security tools from Claude or GPT via MCP
  • automate bug bounty reconnaissance and scanning
  • discover vulnerabilities autonomously
  • solve CTF challenges with LLM assistance
  • generate exploits from CVE intelligence
  • orchestrate Kali Linux tools through an AI agent

When to choose

  • you want LLM agents to drive real offensive security tooling
  • you need an MCP server wrapping 150+ pentesting tools
  • you run bug bounty or CTF workflows and want automation
  • you want autonomous attack-chain discovery with dashboards

When to avoid

  • you need a defensive-only security platform
  • you cannot legally or ethically run offensive tooling
  • you want a simple scanner without LLM integration
  • you need a fully turnkey product rather than a self-hosted server

Facets

service · maturity active

mcp security penetration-testing agent-framework llm-inference vulnerability-scanning osint security penetration-testing artificial-intelligence large-language-models developer-tools python self-hosted cli mcp-server offensive-security bug-bounty ctf kali-linux ai-agents pentesting-automation vulnerability-discovery linux docker

2 sources

Member repositories

RepositoryRoleHealth v2
0x4m4/hexstrike-aimain61

For agents

markdown · JSON · MCP: product_card(name="0x4m4/hexstrike-ai")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem