Agentic Bug Hunter

Agentic Bug Hunter is an AI-powered bug bounty hunting toolkit that automates reconnaissance, triage, and reporting loops with open-source security tooling.

Agentic Bug Hunter is an open-source security tooling toolkit designed for AI agents and modern apps. It functions as a pre-ship security gate that scans vibe-coded apps for secrets, auth flaws, and injection before shipping. The toolkit generates Claude Code skill files for eighteen vulnerability classes from public disclosures, and includes a smart-contract security skill library with Foundry PoC templates for agent-assisted review. It is built for developers and security professionals who need automated vulnerability assessment and reporting loops without manual overhead. The toolkit is published openly with no features held back for a paid tier.

Agentic Bug Hunter at a glance

Best for: Software engineer
Runs on: Web, API, CLI, open source
Pricing: Free and open-source tooling across public repositories.
Released: March 2026
Category: AI coding tool
Website: awarexone.com

Key features

Scans apps for secrets, auth flaws, and injection
Generates Claude Code skill files for vulnerability classes
Provides smart-contract security skill libraries
Includes Foundry PoC templates for agent-assisted review
Drives reconnaissance, triage, and reporting loops

Use it for

Scanning codebases for secrets and auth flaws before shipping
Generating Claude Code skill files from public disclosures
Conducting agent-assisted smart-contract security reviews
Automating reconnaissance and triage workflows

Alternatives to Agentic Bug Hunter

Claude BugHunter — It loads 83 skills and 15 slash commands automatically by topic.
Bug Bounty Triage — Independent validation and evidence-heavy Markdown reporting.
bounty.index — Integrates public bug bounty program data directly into AI coding agents.
PentAGI — It autonomously manages penetration testing workflows within a secure Docker sandbox.
Agent Beacon — Retains coding agent knowledge across tools so errors do not repeat.
pstack — Improves AI coding agent outcomes with rigorous workflows.
Mantis — Automates vulnerability discovery and patching using AI agents.
CodeGraph — It eliminates file crawling, reducing AI agent tool calls by 88% and cutting costs.
Agent Skills — Encodes senior-engineer workflows and quality gates into 24 skills.
Raindrop Workshop — Provides real-time observability and self-healing evaluation loops for local AI agents.
spec-first — It replaces vibe coding with reviewed specs, isolated worktrees, and gated commits.
GitHub Agentic Workflows — Automates repository maintenance safely using AI agents in GitHub Actions.

All Agentic Bug Hunter alternatives