Continuous nmap reconnaissance with fully-local AI analysis. Designed for pentest engagements where client data must not leave the operator's machine.
Status: Early development.
Pentest contracts and enterprise policies (PCI-DSS, HIPAA, NDAs, internal AI bans at firms like JPMorgan, Verizon, Samsung) often prohibit sending engagement data to third-party AI services. This tool keeps all client data — IPs, hostnames, scan outputs, banners — on your machine. The local LLM analyzes; the internet is only consulted for public CVE/vendor data, never client specifics.
TBD
MIT