Skip to content
InfratoApp
Layers / Security / Governance / Red teaming / dark-moon

dark-moon

UNCLAIMED

RED TEAMING

dark-moon — Autonomous AI pentesting engine across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes, IoT firmware and AI/LLM endpoints (OWASP LLM Top 10). Real exploits with proof for eve. Listed under Red teaming in the Security / Governance layer. 4 of 6 comparison attributes are recorded, each with the page it was read from.

50 AI agents. 80+ tools. Live dashboard. Real evidence. Open source under GPLv3.

4 OF 4 SIGNALS HELD

WebsiteASCIT31/Dark-Moon

What it runs on, and what runs on it

0 cited edges
The differentiator

Computed from the stack graph, both directions. Every cited edge links the page it was read from; a vendor-added one links the vendor’s own source — this is the reason to be here rather than on the vendor’s own site.

No edges on record for dark-moon.

Nothing in the directory documents depending on it, and its own docs do not name what it runs on. An edge is only stored when a source states it.

Submit a documented integration →

From dark-moon? No claim is needed for this: a link to your docs that names what dark-moon runs on is enough.

Open-source signals

LICENCE
GPL-3.0
2026-09-12JSON
DOWNLOADS 30D
not measured
LAST COMMIT
not measured

A HOLLOW RING IS UNMEASURED, NOT ZERO · WE DO NOT SUBSTITUTE A PARENT COMPANY’S REPOSITORY FOR A PRODUCT THAT HAS NONE

Price

We hold no price for this product.

This is open-source software: you can run it yourself and the licence costs nothing. If the project also sells a hosted service, we do not yet hold the page it prices it on. If that changes — or if you publish /.well-known/pricing.json — it appears here with a capture date.

How we read prices →

What its categories ask

4 answered · 2 unanswered

6 questions declared by Red teaming. Most rows across the directory read like these.

ATTRIBUTEANSWEREVIDENCE · SOURCE
Continuous testingYes
“Autonomous, continuous penetration testing”
2026-09-29
FrameworksISO 27001, HackerOne, Bugcrowd
“Export Publication-ready reports ISO 27001 ISO 27001, HackerOne and Bugcrowd formats”
2026-09-29
LicenceGPLv3
“Open source at the core. One licence to run the full autonomous platform. Monthly Yearly Community Free forever, GPLv3 Open source, self-host it forever Star on GitHub Community Free Free forever, GPLv3 What's included: Full autonomous pentest engine (CLI/TUI), self-hosted on GitHub GPLv3, audit, fo”
2026-10-06
Open sourceYes
“Open source — self-host it forever Free Free forever — GPLv3”
2026-09-29
Attack libraryno answer on record
Deploymentno answer on record

A ROW WITH NO ANSWER IS NOT A ROW WITH A “NO” · A VENDOR MAY ANSWER A BLANK ONE, MARKED VENDOR CLAIMED WITH ITS SOURCE · A DOCUMENTED VALUE IS DISPUTED, NOT OVERWRITTEN, AND STAYS VISIBLE WHILE WE RE-READ THE SOURCE

Practitioner reviews

Nobody has written one yet.

A review here is structured, not a star: hardware, scale band, what broke in production, and whether you would choose it again.

NO PERCENTAGE IS SHOWN UNDER FIVE REVIEWS · NO STAR RATINGS, EVER

Also in this category

18 products in Red teaming. Comparison defaults to within the category — pairing this with a GPU cloud would produce a page that means nothing.

agenthoundNO DEPENDENTS RECORDEDCOMPARE →
agentic_securityNO DEPENDENTS RECORDEDCOMPARE →
AgentSealNO DEPENDENTS RECORDEDCOMPARE →
AI-Infra-GuardNO DEPENDENTS RECORDEDCOMPARE →
beelzebubNO DEPENDENTS RECORDEDCOMPARE →
cybermesNO DEPENDENTS RECORDEDCOMPARE →
cyberstrikeNO DEPENDENTS RECORDEDCOMPARE →
diffattackNO DEPENDENTS RECORDEDCOMPARE →

USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY

Frequently asked

Is dark-moon open source?
Yes — it is listed as open source, and its repository is the source for the activity figures on this page rather than anything the project says about itself.
Does dark-moon offer continuous testing?
Yes. Read from their own page: “Autonomous, continuous penetration testing”.
Does dark-moon offer open source?
Yes. Read from their own page: “Open source — self-host it forever Free Free forever — GPLv3”.
What does a blank mean on the dark-moon page?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A blank is an absence of evidence, and this page shows how many of its questions are in that state rather than quietly leaving them out.
Where do the dark-moon figures come from?
Each one is read from a public page — usually the vendor's own documentation or pricing page — and carries a link to it with the date it was read. Nothing here is estimated, averaged across sources, or inferred from a similar product. If a figure cannot be traced to a page, it is not published.
Can dark-moon change what this page says?
They can claim the listing and supply or correct values, which are then labelled as theirs. They cannot remove the page, hide a comparison they are losing, or change a figure somebody else recorded with a source. Nothing on the page is for sale. How the site is paid for is set out under money and independence at /our-data#sec5.
Something here is wrong — how do I fix it?
Dispute the value. Every figure links to the page it was read from, so a dispute names the value and gives a source that contradicts it. That is the only lever anyone has over this page, and it is the same lever for the vendor, a competitor and a reader.
Is this listing run by dark-moon?
No. It is built from public sources, and no value on it came from the company. Anyone with an address at the company’s own domain can claim it for free. A claim lets the company write the tagline, description and logo, and answer blank questions or add dependencies, each marked as theirs with a source. Prices, licence and OSS figures stay as the directory read them, category changes only through our review, and each can be disputed with a source.

Cite this page

A model that quotes us should quote us correctly. The reading and its date sit inside the citation rather than beside it, because a quotation carrying only a URL goes wrong the week the URL changes.

infratoapp, “dark-moon — Red teaming”, read 29 September 2026. Continuous testing: Yes as published at dark-moon.org. https://www.infratoapp.com/products/dark-moon

What dark-moon can and cannot change here

Claiming the organisation lets its admins and editors change the tagline, description, logo, docs link and deployment model of every product that org owns — live, labelled as theirs, and logged. Answers to blank questions and dependencies go live too, marked as the owner’s and sourced; a documented answer cannot be overwritten. Everything else on this page is a stated fact with a dispute route: price, licence and OSS figures. Those columns are ungranted at the database level, so they are not a feature we withheld — they are a write that cannot happen. Name, category, website, pricing page and package names can be changed by the owner only through our review. A dispute never deletes a value; it marks it and publishes the correction.

Claim dark-moonFree · email at the company’s own domain