We put together a list of 18 offensive AI packages defenders should watch, starting with ARTEX, PentAGI and Cairn
Our list starts with ARTEX, PentAGI and Cairn, already seen in Google and Mandiant incident reporting, and extends to archived CAI and the easily confused CyberStrikeAI.
By Ryan Merket · Published · Updated
Primary source: x.com
Why it matters
We built this list to give defenders a concrete inventory to hunt against instead of a generic warning about AI hackers. Google and Mandiant incident evidence puts ARTEX, PentAGI and Cairn first, CyberStrikeAI adds exposed-server and MCP risk, and archived or quiet projects such as CAI still create unpatched supply-chain exposure when they are forked into internal harnesses.
We put together a list of 18 offensive AI packages for defenders to watch, adding a second wave of open-source pentest agents to the packages already covered in incident reporting: ARTEX, Cairn, CyberStrike and PentAGI. Our full list is ARTEX, Cairn, CyberStrike, PentAGI, CyberStrikeAI, PentestGPT, PentestAgent, AutoPentester, VulnBot, RedAmon, MAPTA, Strix, Shannon, BugTraceAI, Nebula, hackingBuddyGPT, HexStrike AI and CAI.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.