PENTAGIPentAGI

PentAGI (Penetration Testing Artificial General Intelligence) is an autonomous multi-agent penetration testing framework developed by VXControl, offered in open-source and commercial editions. The operator describes a target and a goal; specialised agents split the task into "Flows" and sub-tasks and run standard Kali Linux tools (Metasploit, Nmap, sqlmap) inside isolated sandboxes, with a dozen cloud and local LLM backends supported. Google Threat Intelligence Group reports in-the-wild abuse since late August 2026: most observed activity stayed at WHOIS asset mapping and vulnerability scanning, but some operations progressed to intrusion and persistence across multiple organisations. GTIG describes a customised orchestration platform built on the open-source version, used between late August and early October 2026 for reconnaissance against system integrators and telecommunications firms in Asia, and PentAGI chained with proxy services against the aerospace sector. No actor attribution is given. Dual-use: its presence alone does not indicate malicious activity.