Skip to content
SPECIFICTION
Get listed

RedAmon

redamon.org

Free plan WebWindowsmacOSLinuxAPISelf-hosted
Visit redamon.org
Spec score 7.8 #12 of 27 in AI Red Teaming Tools

What it is

RedAmon is a free, open-source framework for authorized red-team operations, including reconnaissance, exploitation and post-exploitation. It maps attack surfaces from domains, IP/CIDR targets or batches of domains, then merges findings into a Neo4j graph that its AI agent can query for planning and exploitation. GVM/OpenVAS provides network vulnerability scanning with more than 170,000 NVTs; separate tools detect secrets and scan for vulnerable or malicious packages against a local OSV database. The Secret Multiscanner has 1,060 detectors across 14 sources and optional live API verification. RedAmon supports twelve AI providers and more than 400 language models, and its MCP server lets external agents drive the framework. The Dockerized application runs on Linux, macOS and Windows and supports on-prem deployment. Tools, scanners and agents run in separate containers with per-job ephemeral filesystems and network namespaces. Rules of Engagement, approval gates and scope controls govern operations, with a guardrail blocking government, military and intergovernmental targets. The project warns that configured API keys and credentials are stored unencrypted in PostgreSQL, leaving database security to the user.

Spec sheet

Purpose
RedAmon is an AI-powered agentic red-team framework that automates reconnaissance, exploitation and post-exploitation operations.Read 1 Oct 2026 · redamon.org
Support
The maintainers list [email protected] for questions, feedback and collaboration, plus Telegram contacts @samsamtx and @L4stPL4Y3R.Read 1 Oct 2026 · redamon.org
AI providers
RedAmon supports twelve AI providers and more than 400 language models through one interface.Read 1 Oct 2026 · redamon.org
Attack-surface graph
Recon findings are merged into a Neo4j attack-surface graph that the AI agent queries for planning and exploitation.Read 1 Oct 2026 · redamon.org
Authorized use
The documentation says RedAmon is intended only for authorized security testing, education and research.Read 1 Oct 2026 · redamon.org
Credential storage limit
The project disclaimer states that configured API keys and credentials are stored unencrypted in PostgreSQL and securing the database is the user's responsibility.Read 1 Oct 2026 · github.com
Governance
Rules of Engagement, approval gates, non-bypassable scope controls and a guardrail blocking government, military and intergovernmental targets are provided.Read 1 Oct 2026 · redamon.org
Isolation
Tools, scanners and agents run in separate containers with per-job ephemeral filesystems and network namespaces.Read 1 Oct 2026 · redamon.org
macOS limitation
On macOS, SYN-based scanners cannot see the local LAN because they run inside Docker Desktop's LinuxKit VM.Read 1 Oct 2026 · redamon.org
MCP integration
Its MCP Server lets external agents such as Claude Code, Claude Desktop, Codex CLI, Cursor, Windsurf, Cline, Goose and Gemini CLI drive RedAmon.Read 1 Oct 2026 · redamon.org
Network scanning
GVM/OpenVAS integration provides network vulnerability scanning with more than 170,000 NVTs.Read 1 Oct 2026 · redamon.org
Recon pipeline
Its parallelized reconnaissance pipeline maps attack surfaces from domains, IP/CIDR targets or domain batches.Read 1 Oct 2026 · redamon.org
Secret detection
The Secret Multiscanner provides 1,060 detectors across 14 sources and optional live API verification.Read 1 Oct 2026 · redamon.org
Supply-chain scanning
Supply-chain scanning detects malicious and vulnerable packages offline against a local OSV database.Read 1 Oct 2026 · redamon.org
Supported operating systems
The Dockerized application runs on Linux, macOS and Windows.Read 1 Oct 2026 · redamon.org

Plans and prices

Open-source self-hosted Free MIT license · Docker stack · commercial and personal use Read 1 Oct 2026 · redamon.org

Every RedAmon plan and price →

Strong points and limits

Strong points

  • Maps targets into a queryable Neo4j attack-surface graph.
  • Includes GVM/OpenVAS scanning with over 170,000 NVTs.
  • Supports twelve AI providers and over 400 models.
  • Available for Linux, macOS, Windows and on-prem deployment.

Limits

  • Configured API keys and credentials are stored unencrypted.
  • On macOS, SYN-based scanners cannot see the local LAN.
  • Government, military and intergovernmental targets are blocked.

Who it suits

RedAmon is intended for authorized security testing, education and research. It may suit red teams that need reconnaissance, scanning and exploitation workflows with scope controls and self-hosted deployment.

Verdict

RedAmon offers a broad, self-hosted red-team workflow with scanning, AI integrations and governance controls. Users are responsible for securing the database containing unencrypted configured credentials, and macOS users face a local-LAN scanning limitation.

Where Specifiction places it

Alternatives to RedAmonAll alternatives →