Skip to content
InfratoApp
Layers / Model / Foundation / Large language models / pentestgpt
P

pentestgpt

UNCLAIMED

By GreyDGL

LARGE LANGUAGE MODELS

pentestgpt — Automated Penetration Testing Agentic Framework Powered by Large Language Models. Listed under Large language models in the Model / Foundation layer. 3 of 10 comparison attributes are recorded, each with the page it was read from.

Automated Penetration Testing Agentic Framework Powered by Large Language Models - GreyDGL/PentestGPT

3 OF 4 SIGNALS HELD · MISSING LOGO

RepositoryGreyDGL/PentestGPT

What it runs on, and what runs on it

4 cited edges
The differentiator

Computed from the stack graph, both directions. Every cited edge links the page it was read from; a vendor-added one links the vendor’s own source — this is the reason to be here rather than on the vendor’s own site.

RUNS ON / INTEGRATES WITH

USED BY

  • nothing recorded

Open-source signals

DOWNLOADS 30D
not measured
LAST COMMIT
2026-07-14
2026-09-12JSON

A HOLLOW RING IS UNMEASURED, NOT ZERO · WE DO NOT SUBSTITUTE A PARENT COMPANY’S REPOSITORY FOR A PRODUCT THAT HAS NONE

Price

We hold no price for this product.

This is open-source software: you can run it yourself and the licence costs nothing. If the project also sells a hosted service, we do not yet hold the page it prices it on. If that changes — or if you publish /.well-known/pricing.json — it appears here with a capture date.

How we read prices →

What its categories ask

3 answered · 7 unanswered

10 questions declared by Large language models. Most rows across the directory read like these.

ATTRIBUTEANSWEREVIDENCE · SOURCE
Context window307 tokens
“307 Commits 307 Commits”
2026-10-13
Languages1 languages
“Current snapshot: Provider Current models Legacy (kept) Env key OpenAI gpt-5.5 , gpt-5.5-pro , gpt-5.4-mini , gpt-5.4-nano , gpt-5.2 , gpt-5.3-codex gpt-4o , gpt-4o-mini , o3 , o4-mini OPENAI_API_KEY Anthropic claude-opus-4-8 , claude-sonnet-4-6 , claude-haiku-4-5-20251001 — ANTHROPIC_API_KEY Google”
2026-10-06
ParametersPublished at USENIX Security 2024
“Published at USENIX Security 2024”
2026-10-06
Commercial useno answer on record
Fine-tunableno answer on record
Input modalitiesno answer on record
Open weightsno answer on record
Reasoning modeno answer on record
Structured outputno answer on record
Tool callingno answer on record

A ROW WITH NO ANSWER IS NOT A ROW WITH A “NO” · A VENDOR MAY ANSWER A BLANK ONE, MARKED VENDOR CLAIMED WITH ITS SOURCE · A DOCUMENTED VALUE IS DISPUTED, NOT OVERWRITTEN, AND STAYS VISIBLE WHILE WE RE-READ THE SOURCE

Practitioner reviews

Nobody has written one yet.

A review here is structured, not a star: hardware, scale band, what broke in production, and whether you would choose it again.

NO PERCENTAGE IS SHOWN UNDER FIVE REVIEWS · NO STAR RATINGS, EVER

Also in this category

40 products in Large language models. Comparison defaults to within the category — pairing this with a GPU cloud would produce a page that means nothing.

OpenAIUSED BY 165COMPARE →
Google DeepMindUSED BY 58COMPARE →
AnthropicUSED BY 47COMPARE →
CohereUSED BY 20COMPARE →
AI21 LabsUSED BY 1COMPARE →
01.AINO DEPENDENTS RECORDEDCOMPARE →
agentscopeNO DEPENDENTS RECORDEDCOMPARE →
airunnerNO DEPENDENTS RECORDEDCOMPARE →

USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY

Frequently asked

Is pentestgpt open source?
Yes — it is listed as open source, and its repository is the source for the activity figures on this page rather than anything the project says about itself.
What does pentestgpt run on?
Anthropic, Google DeepMind, langfuse and 1 more. Every one of those is an edge we recorded from documentation that states it, not an inference from what the two products have in common.
What does a blank mean on the pentestgpt page?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A blank is an absence of evidence, and this page shows how many of its questions are in that state rather than quietly leaving them out.
Where do the pentestgpt figures come from?
Each one is read from a public page — usually the vendor's own documentation or pricing page — and carries a link to it with the date it was read. Nothing here is estimated, averaged across sources, or inferred from a similar product. If a figure cannot be traced to a page, it is not published.
Can pentestgpt change what this page says?
They can claim the listing and supply or correct values, which are then labelled as theirs. They cannot remove the page, hide a comparison they are losing, or change a figure somebody else recorded with a source. Nothing on the page is for sale. How the site is paid for is set out under money and independence at /our-data#sec5.
Something here is wrong — how do I fix it?
Dispute the value. Every figure links to the page it was read from, so a dispute names the value and gives a source that contradicts it. That is the only lever anyone has over this page, and it is the same lever for the vendor, a competitor and a reader.
Is this listing run by GreyDGL?
No. It is built from public sources, and no value on it came from the company. Its website is on shared hosting, so an email address cannot prove who owns it and there is no claim by address. A correction with a source can be sent instead. A claim lets the company write the tagline, description and logo, and answer blank questions or add dependencies, each marked as theirs with a source. Prices, licence and OSS figures stay as the directory read them, category changes only through our review, and each can be disputed with a source.

Cite this page

A model that quotes us should quote us correctly. The reading and its date sit inside the citation rather than beside it, because a quotation carrying only a URL goes wrong the week the URL changes.

infratoapp, “pentestgpt — Large language models”, read 13 October 2026. Context window: 307 tokens as published at github.com. https://www.infratoapp.com/products/pentestgpt

What pentestgpt can and cannot change here

Claiming GreyDGL lets its admins and editors change the tagline, description, logo, docs link and deployment model of every product that org owns — live, labelled as theirs, and logged. Answers to blank questions and dependencies go live too, marked as the owner’s and sourced; a documented answer cannot be overwritten. Everything else on this page is a stated fact with a dispute route: price, licence and OSS figures. Those columns are ungranted at the database level, so they are not a feature we withheld — they are a write that cannot happen. Name, category, website, pricing page and package names can be changed by the owner only through our review. A dispute never deletes a value; it marks it and publishes the correction.

GreyDGL’s website is on shared hosting, so an email address cannot prove who owns it and there is no claim by address. If you maintain it, send a correction with a source.

Maintain GreyDGL? Ask us to verify you.