#99th of 14 in Security
decepticon
Autonomous red-team agents that run multi-stage attack chains from an approved plan
- Stars
- 6.5k
- License
- Apache-2.0
- Last commit
- Oct 2026
- Last release
- Oct 2026
- Language
- Python
936 on 4 Apr 20266,505 on 31 Oct 2026
From GitHub's daily star counts.
Checked on GitHub.
Overview
Decepticon is a red-team system with 16 specialist agents covering recon, exploitation, post-exploitation, AD, cloud and reversing. Commands run in persistent tmux sessions inside a Kali sandbox on a separate network, and findings go to a Neo4j knowledge graph. Models are routed through LiteLLM, and it ships a terminal CLI, an on-demand web dashboard and an MCP server for Claude Code and Codex.
Who it is for: Authorized red teamers and pentesters automating engagements
Strengths
- Reports 102/104 (98.08%) on XBOW validation benchmarks, with per-challenge results published
- Persistent tmux sessions let interactive tools like msfconsole and evil-winrm work
- Kali sandbox runs on its own network, separate from the management plane
- Supports ten providers including local Ollama, with tiered fallback chains
Weaknesses
- Needs Docker Compose with several services: LiteLLM, PostgreSQL, Neo4j, LangGraph, sandbox
- LangGraph drives the sandbox through the Docker socket, which widens host exposure
- Offensive Vaccine defense loop is described as planned, not shipped
- Hosted app and commercial demo are promoted; the gap to the open-source CLI is unclear
What it needs
- no GPU
- Docker + Compose
- Needs Docker, Docker Compose v2, LiteLLM, PostgreSQL, Neo4j, LangGraph
- Models: Anthropic, OpenAI, Google Gemini, MiniMax, DeepSeek
Quick answers
Is decepticon open source?
Yes. Its code is on GitHub under the Apache-2.0 license.
Can you run decepticon with Docker?
Yes. Its repository has a Docker setup: a Dockerfile, a Compose file or a published image.
Does decepticon need a GPU?
No, it runs without one.
Also in Security
See all 14| Rank | Project | Score |
|---|---|---|
| 1 | shannonAutonomous pentester that exploits web apps and APIs using source code analysis | 91 out of 100 |
| 2 | ifixaiPython CLI that audits AI agents for policy, access and reliability failures | 86 out of 100 |
| 3 | StrixAutonomous AI pentesting agents that validate vulnerabilities with working exploits | 84 out of 100 |
| #4 | pentagiAutonomous multi-agent penetration testing system with sandboxed security tools | 78 out of 100 |
| #5 | ai-infra-guardRed-teaming platform for AI infra CVEs, MCP servers, agent skills and jailbreaks | 71 out of 100 |