Tech watch

Penetration testing

Finding vulnerabilities through offensive testing within an authorized scope.

31 Oct 2026Tool

CVEngine connects attack-surface discovery with CVE validation

GitHub banner for CVEngine showing its name, a short description, contributor, issue, star, and fork counts, plus a small image of a person holding out their hands.

CVEngine brings continuous asset discovery, vulnerability scanning, and matching against exploited CVEs into a self-hosted platform. It aims to prioritize flaws that actually apply, using read-only validation and evidence rather than presenting only a list of alerts.

Version 1.3 adds Sentinels to run scans from private networks, along with an OpenVAS integration that is disabled by default. Results feed the same inventory and severity ratings; the tool also provides a REST API and MCP integration.

Security Penetration testing Self-hosting

hevnsnt

6 Jun 2026Repository

Strix: automate AI-assisted penetration testing

github.comPermalink

Strix is an open-source tool that uses agents to test an application and report vulnerabilities. Its repository exposes the workflow components for evaluation in an authorized environment.

Penetration testing AI Agents Open Source

25 Feb 2026Tool

Exegol: containerized environments for offensive security

exegol.comPermalink

Exegol provides preconfigured container environments for offensive-security work. This approach gives teams a consistent testing setup without installing every tool on the host.

Penetration testing Docker

1 Feb 2026Repository

AutoPentestX for automated penetration tests and reports

github.comPermalink

AutoPentestX combines offensive testing modules and report generation in a Python repository. The project is early, but shows how an automated penetration-testing workflow is assembled.

Penetration testing Automation Python