What it does
Bug bounty programmes pay people to find and report security flaws in a company's systems, with permission. Agentic Bug Hunter uses AI to help with this: it maps a target, tests it for weaknesses, checks its findings and writes a report ready to submit.
It remembers patterns from earlier targets and can pick up where a session left off. It works as a Claude Code plug-in or as a standalone terminal tool with your choice of AI provider, including free local models through Ollama.
Fuller scanning uses several well-known outside security tools, which are installed separately.
Who it's for
Security researchers taking part in authorised bug bounty programmes.
Can I use it without coding?
Developers only. A terminal tool for people with security-testing experience. New to this? Start here.
Can I run it?
- Cost
- Free, but needs an AI accountThe software is free, but it uses an online AI service (like OpenAI or Anthropic), which usually charges for use.
- Runs on
- Mac, Linux
- Computer
- An ordinary computer is fine
- Privacy
- Your choice: run it on your device or use an online service
- API key
- Not needed
Try it
Using Claude Code, Cursor or another AI coding assistant? Paste the prompt and it will walk you through the setup.New to this?
Before you install
- Only download from the official GitHub page. Copies with similar names exist for many popular projects.
- License (MIT): Very permissive: free to use, change and share, including for business.
- More on staying safe