Back to directory

Decepticon

An autonomous red-team agent platform, orchestrated with LangGraph, that runs reconnaissance, exploitation and reporting for authorized penetration-testing engagements.

Decepticon

Decepticon installs as a Docker Compose stack (LiteLLM, PostgreSQL, Neo4j, Skillogy, LangGraph and a sandbox) that brings up a core management plane and drops into a terminal CLI after an interactive onboarding wizard for a provider, API key and model profile. Specialist workloads such as BloodHound CE, Sliver C2 and Ghidra MCP, and a web dashboard, start on demand from inside the CLI.

It is also installable as a client SDK from PyPI, shipping agent factories, middleware, tools and skills that route LLM calls and sandbox execution to runtime services over HTTP; it supports declarative plugin bundles and a safety gate for building a product, research integration or custom orchestrator on top of the agents. A hosted cloud version is available for engagements that skip local Docker setup.

It is written in Python and licensed under Apache-2.0.

More in Security

See all 287
  • The Standup

    standup.thecompound.tech

    A daily email and dashboard tracking software releases, security advisories, outages and breaking changes across the vendors and repositories a team depends on, surfacing only what needs action rather than a full news feed.

  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • Compliance Posture

    complianceposture.com

    A free, searchable directory that tracks the security and compliance certifications, such as SOC 2, ISO 27001, HIPAA, and GDPR, of over 400 SaaS vendors across twenty categories, with side-by-side comparisons.