Repolode
Enviar
zakirkun

zakirkun/guardian-cli

A Python CLI that uses LLMs such as Google Gemini, OpenAI, and Claude to orchestrate penetration-testing workflows around established security tools like nmap and nuclei.

Ver en GitHub
Estrellas
1,895
Forks
368
Issues abiertos
5
Último commit
hace 4 meses

¿Qué es?

Guardian is a command-line framework for automating penetration tests. An AI agent plans the testing steps, selects which security tools to run, and analyzes their output, while every tool execution is recorded so each finding can be traced back to the command that produced it.

It supports several AI providers, including OpenAI, Claude, Gemini, OpenRouter, Requesty, Ollama, and OpenAI-compatible endpoints. The project ships about 50 tool wrappers covering network scanning, web reconnaissance, subdomain discovery, vulnerability scanning, SSL/TLS testing, cloud and container audits, and Active Directory and Android assessments. Workflows are defined in YAML as a dependency graph, and steps can run in parallel and resume after interruption.

Reports can be generated as Markdown, HTML, or JSON, and findings can be exported as SARIF, to DefectDojo, or to Slack. The tool includes scope validation, a confirmation gate for intrusive tools, and redaction of API keys in logs. Guardian is intended only for systems the user is authorized to test.

Funciones clave

  • 01Multi-provider AI planning and tool selection, including Gemini, OpenAI, Claude, and local Ollama models.
  • 02About 50 wrapped security tools across network, web, cloud, and mobile categories.
  • 03YAML workflows with dependency-based parallel execution and resume support.
  • 04Evidence capture that links each finding to its source tool execution.
  • 05Report export in Markdown, HTML, JSON, and SARIF, plus DefectDojo and Slack integrations.
  • 06Scope validation and a confirmation gate for intrusive tools.

Casos de uso

  • Running a repeatable reconnaissance and web vulnerability scan against systems you are authorized to test.
  • Producing structured pentest reports with evidence and export to issue trackers or SARIF-based code scanning.
  • Experimenting with LLM-driven security automation using a local model via Ollama.

Temas

#penetration-testing#security-automation#llm-agent#cli#gemini#vulnerability-scanning#automation#gemini-ai#generative-ai#pentest-tool

Preguntas frecuentes

¿Qué es guardian-cli?
A Python CLI that uses LLMs such as Google Gemini, OpenAI, and Claude to orchestrate penetration-testing workflows around established security tools like nmap and nuclei. Guardian is a command-line framework for automating penetration tests. An AI agent plans the testing steps, selects which security tools to run, and analyzes their output, while every tool execution is recorded so each finding can be traced back to the command that produced it.
¿guardian-cli es gratuito? ¿Qué licencia tiene?
guardian-cli es open source bajo la licencia Other. Revisa los términos de la licencia antes de usarlo en productos comerciales.
¿guardian-cli sigue mantenido?
Actualizado en los últimos 6 meses. El último commit de guardian-cli fue el 27 jun 2026.
¿Para qué puedo usar guardian-cli?
Running a repeatable reconnaissance and web vulnerability scan against systems you are authorized to test. Producing structured pentest reports with evidence and export to issue trackers or SARIF-based code scanning. Experimenting with LLM-driven security automation using a local model via Ollama.
¿Dónde consigo guardian-cli?
El código fuente y las instrucciones de instalación están en GitHub: https://github.com/zakirkun/guardian-cli

Resumen generado por IA a partir del README del proyecto. Las estadísticas de GitHub se actualizan a diario.

Proyectos relacionados