· 5 min read
PentAGI deserves its reputation: a fully autonomous, self-hostable multi-agent system that behaves like a small simulated security firm in Docker. If you already run it and are happy, keep it. This is for teams who hit one of its edges.
Where PentAGI stops and Darkmoon continues
- Model location. PentAGI is built around cloud LLM providers. Darkmoon runs by default on a local model (Ollama or llama.cpp) and ships a Privacy Gateway that tokenizes IPs, hostnames and credentials before anything is sent anywhere.
- Scope. PentAGI centers on web and host targets. Darkmoon adds first-class Active Directory and Kubernetes attack paths.
- Interface. Darkmoon exposes an MCP server, so any MCP-capable agent can drive it.
Proof, not adjectives
Darkmoon found 57 real vulnerabilities on OWASP Juice Shop in 28 minutes, black-box, on a local model, with a working exploit per finding. It is reproducible: the open AI-pentester benchmark.
Full disclosure: Darkmoon is our project. Try it: github.com/ASCIT31/Dark-Moon.