Back to directory

PHANTOM

An autonomous AI command center for penetration testing and security research that runs recursive tool-calling loops against a target with real-time streaming output, a local memory store and a choice of LLM backends.

Visit website (opens in a new tab)phantom-pentest.vercel.app
PHANTOM

PHANTOM is an AI assistant built for penetration testing, security research and related general-purpose tasks, run from a phantom CLI command that starts a local server with a browser-based dark interface. Once launched, it lets the connected language model call security tools recursively and continue working toward a goal without needing constant manual prompting.

Tools install their own system dependencies automatically and parse their output for the model, an orchestrator coordinates specialist agents for log analysis, compliance and threat modeling in parallel, and a SQLite-backed memory store gives the agent recall across sessions so it does not repeat reconnaissance. It works with OpenAI, OpenRouter, Ollama, LM Studio, DeepSeek, Claude or any OpenAI-compatible backend, and is installed with a shell or PowerShell script or built manually from source with Node.js.

More in Security

See all 287
  • The Standup

    standup.thecompound.tech

    A daily email and dashboard tracking software releases, security advisories, outages and breaking changes across the vendors and repositories a team depends on, surfacing only what needs action rather than a full news feed.

  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • Compliance Posture

    complianceposture.com

    A free, searchable directory that tracks the security and compliance certifications, such as SOC 2, ISO 27001, HIPAA, and GDPR, of over 400 SaaS vendors across twenty categories, with side-by-side comparisons.