Back to directory

Agentic Bug Hunter

An AI-powered bug-bounty toolkit that runs reconnaissance, tests for vulnerabilities, validates findings against a strict gate, and writes a submission-ready report for platforms such as HackerOne, Bugcrowd, Intigriti or Immunefi.

Agentic Bug Hunter

Agentic Bug Hunter installs as a standalone CLI, bughunter, that needs no subscription, or as a Claude Code plugin. Running bughunter setup connects a free AI provider, and bughunter hunt target.com runs the recon-to-report loop; full reconnaissance also relies on external tools such as subfinder, httpx, nuclei, katana, ffuf and nmap, installed with a bundled script.

It remembers patterns found on one target to inform work on the next, and sessions resume where they left off, with output written to ~/.bughunter/.

It is written in Python, installs with uv tool install agentic-bug-hunter or pipx, and is licensed under MIT.

More in Security

See all 287
  • The Standup

    standup.thecompound.tech

    A daily email and dashboard tracking software releases, security advisories, outages and breaking changes across the vendors and repositories a team depends on, surfacing only what needs action rather than a full news feed.

  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • Compliance Posture

    complianceposture.com

    A free, searchable directory that tracks the security and compliance certifications, such as SOC 2, ISO 27001, HIPAA, and GDPR, of over 400 SaaS vendors across twenty categories, with side-by-side comparisons.