RedAmon
RedAmon: A self-hosted platform for autonomous testing, triage, reporting, and remediation workflows. Ranked #13 of 34 in Penetration Testing Software by our editors (7.9/10); pricing: Free plan; best for open-source autonomous testing experiments.
At a glance
- Editor score7.9 / 10
- PricingFree plan
- Best forOpen-source autonomous testing experiments
- Free planYes
- Paid fromFree
- DeploymentOn-prem
- Facts checked20 Sep 2026

Where it wins
- Free, open-source platform with on-premises deployment
- Covers web, API, GraphQL, and network security testing
- Generates reports and proposes fixes through GitHub pull requests
Where it doesn't
- Self-hosted deployment requires infrastructure management
- Autonomous exploitation is designed for authorized testing environments
- Broader workflows may exceed the needs of narrow testing projects
Our verdict on RedAmon
RedAmon is a free, open-source penetration testing platform for security teams, penetration testers, researchers, and authorized testing environments. It combines parallelized reconnaissance, vulnerability scanning, exploitation, post-exploitation, AI-assisted triage, finding management, and report generation in a self-hosted application. Its scope spans web, API, GraphQL, and network security testing, with deployment options covering web, Linux, Windows, macOS, API, and self-hosted environments.
The platform’s strongest differentiator is its autonomous testing workflow. RedAmon uses a Neo4j attack-surface knowledge graph to organize discovered assets and findings, while an autonomous AI exploitation agent operates through a Kali Linux sandbox with container isolation. Findings can be deduplicated, triaged, and assigned verdicts, helping teams move from reconnaissance to review within one system. The AI layer supports OpenAI, Anthropic, Google Gemini, Ollama, vLLM, and LM Studio, and an MCP server connects RedAmon with external AI-agent clients.
RedAmon also extends beyond discovery and exploitation into delivery. It generates pentest reports in HTML, PDF, and DOCX formats, provides AI-assisted remediation, and can propose code fixes and open GitHub pull requests. Docker, Neo4j, PostgreSQL, GitHub, and MCP clients support the surrounding platform and workflow. Its self-hosted, on-premises model suits organizations that want control over deployment and testing environments, while the breadth of features may be more than needed for a narrowly focused assessment tool. Choose RedAmon for open-source autonomous testing experiments and integrated remediation workflows; choose an alternative if you want a simpler, managed service.
Your product? Our editors can test RedAmon in depth and publish a review, labelled as paid · from $149/mo →
RedAmon pricing
RedAmon fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Deployment | On-prem |
| Web app testing | Yes |
| API testing | Yes |
| Network testing | Yes |
| Mobile testing | Not verified |
| Finding management | Yes |
| Evidence capture | Not verified |
| Deployment | Self-hosted |
| Platforms | Web, Linux, Windows, macOS |
| Support | Community, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 11 integrations: GitHub, Docker, Neo4j, PostgreSQL, OpenAI, Anthropic … |
| Pricing | Free plan |
| Website | redamon.org |
| Facts checked | 20 Sep 2026 |
RedAmon integrations
RedAmon lists 11 integrations on its own site.
- GitHub
- Docker
- Neo4j
- PostgreSQL
- OpenAI
- Anthropic
- Google Gemini
- Ollama
- vLLM
- LM Studio
- MCP clients
Alternatives to RedAmon
- PentesterraBroad automated penetration testing with a free plan and €23 monthly entry tier.9.3
- PentiBroad AI-led testing with human validation, evidence, retesting, and compliance reporting.9.1
- Core ImpactA broad on-premise toolkit for repeatable infrastructure, web, client-side, wireless and mobile testing.8.9
See all RedAmon alternatives →
Also Ranked In
RedAmon is ranked in 2 of our directories.
Used RedAmon? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used RedAmon for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
RedAmon is listed in our Penetration Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/redamon/"><img src="https://www.itechguides.com/best/badge/redamon.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update

