Penthera

Penthera: Cyber security agent that checks applications, dependencies, and AI coding tools offline.

Penthera checks your app, its dependencies, and your AI coding tools on your own machine. It fixes what it can with your approval, ensuring every finding comes from a readable rule with file and line evidence. A model may propose, but a rule decides. It integrates with coding agents like Claude Code, Codex, and Cursor using Model Context Protocol (MCP) servers and skills. It works locally using Node.js 22 or later without requiring an account or internet connection. Supported integrations include Claude Code, Codex, GitHub Copilot, Gemini CLI, Cursor, Windsurf, Zed, and JetBrains.

Penthera at a glance

Best for: Software engineer
Runs on: Web, CLI, API, VS Code, JetBrains, self-hosted, open source
Pricing: Free and open source under MIT license
Released: November 2026
Category: AI coding tool
Website: github.com/danoszz/penthera

Key features

Check apps and dependencies offline
Fix issues with user approval
Read every rule and finding evidence
Integrate via MCP servers and skills
Run checks without telemetry
Scan running apps locally

Use it for

Scan applications for security issues
Check AI coding tools for vulnerabilities
Inspect dependencies for malicious packages
Review code with readable security rules

Alternatives to Penthera

PentAGI — It autonomously manages penetration testing workflows within a secure Docker sandbox.
Pentest AI — Eliminates false positives by reproducing every exploit three times.
CodeGraph — It eliminates file crawling, reducing AI agent tool calls by 88% and cutting costs.
Paveo — Enforces deterministic rules on AI agents to prevent destructive actions.
Shippie — It runs on pull requests or locally to catch bugs, secrets, and missing tests.
PentestGPT — Runs autonomous multi-stage pipelines or interactive multi-LLM workflows for security tests.
Epherem — Identifies security mistakes in AI-built code with suggested fixes for each one.
OpenCode — Works with 75+ model providers, local models, and existing subscriptions
PentestAgent — It provides autonomous multi-agent penetration testing and Docker tool isolation.
AgentGuard — Get a security and quality assessment of AI skills in seconds without an account.
Codacy — Enforces unified coding standards and security policies across the software lifecycle.
Autonomous Pentest Agent — Dual-graph architecture for asset synchronization and multi-step attack planning.

All Penthera alternatives