Kritt-ai/open-kritt

Health v2 · maintenance only

Flags: young

Adoption not part of the score

2011 stars · 341 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

open·kritt is an open-source, self-hosted AI vulnerability research platform that decomposes a codebase into focused security tasks, runs AI agents (Codex or Claude Code) in parallel, and combines results into de-duplicated, ranked findings. It includes a workflow builder, per-finding verification post-scripts, PoC generation, and ZIP export of scan results.

Use cases

• find vulnerabilities in a codebase with ai agents
• automate bug bounty research on smart contracts or web apps
• audit my repository for security issues before release
• build reusable security research workflows with llm prompts
• generate proofs of concept for discovered vulnerabilities
• self-host an ai-powered vulnerability scanner
• triage and de-duplicate security findings with custom severity rules

When to choose

• you are a security researcher or bug bounty hunter wanting AI-assisted code review with full control over prompts, models, and data
• you want self-hosted infrastructure so code never leaves your environment
• you need structured, de-duplicated, ranked findings rather than raw LLM output
• you want to validate findings with automated post-scripts and PoC generation

When to avoid

• you need a fully automated, hands-off scanner with zero configuration
• you lack access to paid LLM providers (OpenAI, Anthropic, OpenRouter, xAI) or Codex/Claude Code
• you need a compliance-oriented SAST tool with established CVE databases rather than AI-driven research
• your codebase is very large and you cannot afford extensive LLM token usage

Facets

application · maturity active

security vulnerability-scanning agent-framework llm-inference workflow-automation developer-tools security artificial-intelligence developer-tools penetration-testing self-hosted cli bug-bounty code-security ai-security-research vulnerability-research source-code-analysis security-automation agpl ai-agents web-server nodejs docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Kritt-ai/open-kritt")