> ## Documentation Index
> Fetch the complete documentation index at: https://mintlify.com/pensarai/apex/llms.txt
> Use this file to discover all available pages before exploring further.
# Introduction
> AI-powered penetration testing tool that enables you to use an AI agent to perform comprehensive blackbox and whitebox pentesting directly in your terminal
# Pensar Apex
Pensar Apex is an **AI-powered penetration testing CLI tool** that enables security professionals to perform comprehensive blackbox and whitebox security assessments using advanced AI agents—directly from your terminal.
## What is Pensar Apex?
Pensar Apex combines the power of large language models with professional penetration testing methodologies to automate and enhance security assessments. It provides both an interactive Terminal User Interface (TUI) and command-line tools for running automated penetration tests.
### Key Features
Leverages advanced AI models (Anthropic, OpenAI, AWS Bedrock, vLLM) to intelligently explore attack surfaces and discover vulnerabilities
Supports both blackbox testing against live services and whitebox testing with source code access
Automatically maps and analyzes your application's attack surface, identifying potential entry points
Generates proof-of-concept exploits and validates vulnerabilities automatically
Produces detailed findings with PoCs, saved in structured JSON format for easy integration
Beautiful terminal interface with real-time agent interactions and progress tracking
## Use Cases
### Security Professionals
* **Automated Pentesting**: Run comprehensive security assessments with minimal manual intervention
* **Attack Surface Analysis**: Quickly map and understand application attack surfaces
* **Vulnerability Research**: Discover and validate security vulnerabilities efficiently
### Development Teams
* **Security Testing**: Integrate into CI/CD pipelines for continuous security validation
* **Code Review**: Perform whitebox analysis on source code to identify security issues
* **Pre-deployment Checks**: Verify security posture before production deployments
### Red Teams
* **Reconnaissance**: Automate initial reconnaissance and attack surface mapping
* **Exploit Development**: Generate PoCs for identified vulnerabilities
* **Pivoting & Exfiltration**: Use exfil mode for advanced attack scenarios
## Testing Modes
Test live web applications and services without access to source code:
```bash theme={null}
pensar pentest --target https://example.com
```
* Network scanning and port enumeration
* Web application analysis
* Authentication testing
* Vulnerability discovery and exploitation
Test applications with source code access for deeper analysis:
```bash theme={null}
pensar pentest --target https://example.com --cwd /path/to/source
```
* Static code analysis
* Configuration review
* Dependency scanning
* Logic vulnerability detection
Focus on specific objectives or attack vectors:
```bash theme={null}
pensar targeted-pentest --target https://example.com \
--objective "Test for SQL injection" \
--objective "Check authentication bypass"
```
* Custom testing objectives
* Focused vulnerability assessment
* Specific attack vector testing
## AI Provider Support
Pensar Apex supports multiple AI providers:
* **Anthropic** (Claude models) - **Recommended** for best performance
* **OpenAI** (GPT-4 and beyond)
* **AWS Bedrock** (Multiple model access)
* **OpenRouter** (Access to various models)
* **vLLM** (Local model deployment)
**Anthropic models** provide the best performance and are recommended for optimal penetration testing results.
## How It Works
Pensar Apex first analyzes your target to map out the attack surface—discovering endpoints, technologies, and potential entry points.
AI agents systematically test discovered surfaces, applying penetration testing methodologies and security heuristics to identify vulnerabilities.
When vulnerabilities are discovered, the agent automatically attempts to exploit them and generates proof-of-concept code to validate the findings.
All findings are documented with detailed descriptions, severity ratings, reproduction steps, and PoC code in structured JSON format.
## Kali Linux Container
For **optimal performance**, Pensar Apex includes a preconfigured Kali Linux container with all penetration testing tools installed:
```bash theme={null}
cd container
cp env.example .env # Add your API keys
docker compose up --build -d
docker compose exec kali-apex bash
```
Inside the container:
```bash theme={null}
pensar
```
On Linux hosts, consider using `network_mode: host` in `docker-compose.yml` for comprehensive network scanning capabilities.
## Responsible Use
**This tool is for authorized security testing only.**
You may only test systems you own or have explicit, written permission to test. Unauthorized testing of third-party systems is strictly prohibited and may be illegal.
By using Pensar Apex, you agree to comply with all applicable laws and regulations governing security testing, privacy, and data access.
Before using Pensar Apex, please read the [Responsible Use Disclosure](https://github.com/pensarai/apex/blob/main/RESPONSIBLE_USE.md).
## Next Steps
Install Pensar Apex on your system
Run your first penetration test
View source code and contribute
Join the community for support