RedAmon

RedAmon is ranked #3 of 34 in penetration testing software on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.

RedAmon plans and pricing

All plans

Open-source self-hosted Free MIT license · Docker stack · commercial and personal use redamon.org · 1 Oct 2026

Compared on penetration testing software

Free plan: Yes

Best RedAmon alternatives

See all 12

8.0 Dradis Free plan

7.5 Pentesterra Free plan

7.2 Caido Free plan

7.1 Burp Suite DAST Free trial

7.1 Faraday Free trial

7.1 PenTest.WS Free trial $4.95/mo

RedAmon

Purpose: RedAmon is an AI-powered agentic red-team framework that automates reconnaissance, exploitation and post-exploitation operations.
Recon pipeline: Its parallelized reconnaissance pipeline maps attack surfaces from domains, IP/CIDR targets or domain batches.
Attack-surface graph: Recon findings are merged into a Neo4j attack-surface graph that the AI agent queries for planning and exploitation.
Network scanning: GVM/OpenVAS integration provides network vulnerability scanning with more than 170,000 NVTs.
Secret detection: The Secret Multiscanner provides 1,060 detectors across 14 sources and optional live API verification.
Supply-chain scanning: Supply-chain scanning detects malicious and vulnerable packages offline against a local OSV database.
AI providers: RedAmon supports twelve AI providers and more than 400 language models through one interface.
MCP integration: Its MCP Server lets external agents such as Claude Code, Claude Desktop, Codex CLI, Cursor, Windsurf, Cline, Goose and Gemini CLI drive RedAmon.
Supported operating systems: The Dockerized application runs on Linux, macOS and Windows.
macOS limitation: On macOS, SYN-based scanners cannot see the local LAN because they run inside Docker Desktop's LinuxKit VM.
Isolation: Tools, scanners and agents run in separate containers with per-job ephemeral filesystems and network namespaces.
Governance: Rules of Engagement, approval gates, non-bypassable scope controls and a guardrail blocking government, military and intergovernmental targets are provided.
Credential storage limit: The project disclaimer states that configured API keys and credentials are stored unencrypted in PostgreSQL and securing the database is the user's responsibility.
Support: The maintainers list [email protected] for questions, feedback and collaboration, plus Telegram contacts @samsamtx and @L4stPL4Y3R.
Price from: Free

Visit site Alternatives

Where it ranks on The Geeks Club

Best Penetration Testing Software in 2026#3 of 34
Best AI Red Teaming Tools in 2026#6 of 27

Is RedAmon yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote RedAmon

Sources

redamon.org/docs· checked 1 Oct 2026
redamon.org· checked 1 Oct 2026
redamon.org/docs/ai-model-providers· checked 1 Oct 2026
redamon.org/docs/mcp-server· checked 1 Oct 2026
redamon.org/docs/getting-started· checked 1 Oct 2026
github.com/samugit83/redamon/blob/master/DISCLAIME· checked 1 Oct 2026