claude-code-pentest
★ 31
vs
agent-bom
★ 35
claude-code-pentest vs agent-bom
claude-code-pentest: claude-code-pentest provides 6 automated tools and 43 Python scripts to run a full penetration test on any domain, from reconnaissance to vulnerability scanning and report generation. No additional dependencies are required beyond Python.; agent-bom: agent-bom is an end-to-end open security scanner for the AI supply chain. It performs CVE discovery, blast-radius analysis, and provides remediation guidance. It supports multiple entry points including agent scanning, container image scanning, IaC scanning, and a self-hosted enterprise deployment.
01
TL;DR
claude-code-pentestSecurity & Safety · ★ 31
Penetration testing on any web domain
agent-bomSecurity & Safety · ★ 35
CI/CD gating for AI supply chain security
02
Side-by-Side Comparison
Field
Category
Security & Safety
Security & Safety
Stars
★ 31
★ 35
License
MIT
Apache-2.0
Install Command
git clone https://github.com/KaQus/claude-code-pentest.git
pip install agent-bom
Updated
4mo ago
1d ago
Open Source
Yes
Yes
Tags
ai-agents, autonomous-agents, claude
ai-agents, ai-security, ai-supply-chain
03
Features
016 automated tools covering full pentest workflow
0243 Python scripts with no extra dependencies
03Reconnaissance, vulnerability scanning, exploit chains, and reporting
04Easy to use: just provide a domain name
05Customizable scan depth and modules
01End-to-end blast radius analysis from CVE to credential exposure
02Multi-entrypoint scanning: agents, images, IaC, packages, cloud
03Compliance export (FedRAMP, SOC2, NIST AI RMF, etc.) with tamper-evident evidence bundles
04Self-hosted enterprise deployment with Helm, Postgres, ClickHouse, and Snowflake backends
05Runtime MCP proxy and gateway for traffic enforcement and audit
04
Use Cases
↳Penetration testing on any web domain
↳Security research and vulnerability discovery
↳Bug bounty report generation
↳CI/CD gating for AI supply chain security
↳Security team audit of AI agents and MCP servers
↳Self-hosted enterprise security scanning with fleet management
FAQ
FAQ
What is the difference between claude-code-pentest and agent-bom?
Both claude-code-pentest and agent-bom are in the Security & Safety category. claude-code-pentest has 31 stars, while agent-bom has 35 stars.
Which is better, claude-code-pentest or agent-bom?
The best choice depends on your use case. Choose claude-code-pentest if Penetration testing on any web domain, and agent-bom if CI/CD gating for AI supply chain security.
Is claude-code-pentest free or open source?
Yes, claude-code-pentest is open source on GitHub (MIT).
Is agent-bom free or open source?
Yes, agent-bom is open source on GitHub (Apache-2.0).
Cloud Infrastructure
AdDeploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.
→