What is VulnClaw? Overview, metrics & alternatives

VulnClaw is a skill AI agent for Automate vulnerability discovery, exploitation, and report generation for a target system using natural language instructions. Pricing: Free. As of 2026-10-23, KanonAgent records 64 upvotes. First indexed by KanonAgent on 2026-08-06.

VulnClaw lets security researchers and penetration testers automatically find and exploit vulnerabilities in systems by simply describing the target in plain language, then generating full test reports.

64 upvotes

Tracked by Kanon since Aug 6, 2026

no signal yet

status

50/100

momentum · conf 0.92

62d

tracked since 2026-08-22

evidence records

No signal event on file yet — status is unknown, not "quiet".

📈 Timelinewhat changed, and when

2026-08-22 first observed Kanon started keeping permanent history for this agent

🔎 Known / Unknown 11 of 23 fields unknown

Machine-callable	—	unknown	—
Open source	1	verified	1 quote(s)
Self-hostable	1	inferred	1 quote(s)
Bring your own key	1	inferred	1 quote(s)
Autonomy level	3	inferred	3 quote(s)
Pricing model	—	unknown	—
Integrations	mcp	inferred	1 quote(s)

“Unknown” means we have not verified it — it is not a “no”. Hard filters never treat unknown as false.

🤖 Agent teardown · skill

Job to be doneAutomate vulnerability discovery, exploitation, and report generation for a target system using natural language instructions.

AutonomyL3 · plans autonomously(evidence: "何时调用工具、何时完成/询问/判定无路可走…")

Who it is forSecurity researchers and penetration testing engineers

Prerequisitesopen source · self-hostable · bring your own API key

Integrationsmcp

PricingFree

Traction · why it is risingGained attention on ProductHunt with 69 votes, highlighting growing interest in AI-driven automation for cybersecurity tasks.

Why it matters

It demonstrates a cutting-edge integration of AI agents with MCP toolchains to enable end-to-end automation from natural language input to complete penetration testing workflows.

Evidence quotesverbatim, from the product’s own materials

“public GitHub repository (README fetched)”— structural

“本项目是可独立运行的 AI 渗透测试 Agent。”— readme

“配合 OpenAI / Anthropic / MiniMax / DeepSeek 等兼容模型”— readme

“何时调用工具、何时完成/询问/判定无路可走”— readme

“模型自己决定下一步、何时调用工具、何时完成”— readme

“轻量纠偏层 — 工具调用前后记录重复调用、失”— readme

Python

Signal source: GitHub

Visit official site →

📛 Official badgefor your site / README

Building VulnClaw? Pick a style above — the embed code updates live. Deep color control via URL params: bg= / fg= / accent= (hex). It links back to this page.

On mobile tap Share for WeChat / RED (Xiaohongshu) / X; on desktop use Copy text and paste into the app.

FAQ

What is VulnClaw?

What does VulnClaw do?

Automate vulnerability discovery, exploitation, and report generation for a target system using natural language instructions.

Why does VulnClaw matter?

It demonstrates a cutting-edge integration of AI agents with MCP toolchains to enable end-to-end automation from natural language input to complete penetration testing workflows.

How much does VulnClaw cost?

Free

Is VulnClaw free?

Yes — VulnClaw has a free tier. Pricing as stated on its own page: Free

Is VulnClaw open source?

Yes — VulnClaw is open source.

Can I self-host VulnClaw?

Yes — VulnClaw can be self-hosted.

What does VulnClaw integrate with?

mcp

How popular is VulnClaw?

As tracked by KanonAgent: 64 upvotes (first indexed 2026-08-06).

What are the best VulnClaw alternatives?

Similar AI agents tracked by KanonAgent: Stealth Venture, archify, open-design, deer-flow, ruflo, career-ops.

VulnClaw alternatives — similar AI agents

Stealth Venture archify open-design deer-flow ruflo career-ops

Where this fits — browse the same shelf

AI Agent Skills & Plugins AI agents for Data report generation Are there open-source AI agents for Data report generation?Can I self-host an AI agent for Data report generation?AI agents that work with MCP (Model Context Protocol)Self-hosted & open-source AI agents