Pentest Copilot is an open-source project on GitHub with about 1,533 stars, most recently updated in 2026. Pentest Copilot is an AI-powered, browser-based ethical hacking assistant from BugBase Security. The open-source agent connects to a Kali attack box, runs security tools autonomously, analyzes the results and iterates for up to 25 steps per turn, helping penetration testers move through engagements, boot2root boxes and CTF challenges faster.
Published on GitHub under the MIT license, Pentest Copilot has attracted a community of about 1,533 stars, which places it among the more visible open-source AI projects in its niche. Development was still active as of 2026, based on the repository’s latest updates. Because the full source code is public, teams can audit how it works, adapt it to their own stack, and self-host it rather than depending on a closed hosted product.
The repository is tagged with topics including ai, cybersecurity, cybersecurity-tools, llms, pentesting, which gives a quick picture of where it fits in the open-source AI ecosystem. New users can explore the examples and documentation in the repository to understand the main workflows before integrating it into their own projects, and the public issue tracker shows what the maintainers are actively working on and what the community is asking for.
The agent is MIT-licensed open source and free to run yourself, while BugBase also offers its hosted security platform, making the overall offering freemium.
Pentest Copilot is best suited for penetration testers, red teamers and CTF players who want an AI copilot for repetitive testing workflows, used only on systems they are authorized to test. Anyone evaluating it should start with the GitHub repository, where the documentation, examples and issue tracker show exactly what the current version can do.