BitterSecurity

    BitterSecurity/Decepticon

    Autonomous Hacking Agent for Red Team

    ai-agents
    ai
    security
    llm
    agent
    ai-penetration-testing
    autonomous-exploit-testing
    cybersecurity
    generative-ai
    Python
    Apache-2.0
    6.5K stars
    1.3K forks
    6.5K GitHub watchers
    Updated Nov 5, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest 8 days ago, with 18 contributors on GitHub.

    Use Cases & Benefits

    • Implements an autonomous AI-driven red team agent that executes realistic multi-phase cyberattack chains for penetration testing.
    • Enables professional-grade, adaptive offensive security operations with interactive shells and sandbox isolation, surpassing simple scanning tools.
    • Use for conducting comprehensive red team engagements that generate full operational plans and adhere to strict rules of engagement.
    • Use for integrating autonomous offensive agents into security research or custom orchestration workflows via its Python SDK.
    • Use for running cloud-hosted autonomous penetration tests without local setup, leveraging a live web app for ease of access.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Apache 2.0

    Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    "Another AI hacker? Let us guess — it runs nmap and writes a report."

    Skip the Docker setup — run autonomous red-team engagements right from your browser.

    Prerequisites: Docker and Docker Compose v2. Supported on macOS (Apple Silicon + Intel), Linux (amd64 + arm64), and Windows (amd64 + arm64) — native via PowerShell or via WSL2 (Ubuntu / Kali).

    The default start brings up the core management plane (LiteLLM, PostgreSQL, Neo4j, Skillogy, LangGraph, sandbox) and launches the terminal CLI. Specialist workloads (BloodHound CE, Sliver C2, Ghidra MCP, …) and the web dashboard come up on demand — the orchestrator spawns specialists via ops_start("ad") etc., and you bring up the dashboard from inside the CLI with /web (see Web Dashboard).

    Excerpt from the BitterSecurity/Decepticon README on GitHub (Apache-2.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Oct 11: +58

    +1,509 stars over 87 days across 8 snapshot days; best day +58 on Oct 11.

    Forks

    1.3K+274

    Open issues

    6+6

    Compared with peers in AI Agents

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    BitterSecurity/Decepticon compared with AI Agents repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    vercel-labs/agent-desktop17.0K+13.3K33today
    thedotmack/claude-mem113.6K+8.8K35today
    stablyai/orca116.8K+6.6K40today
    milind-soni/OpenMausBot13.5K+6.0K45today
    HKUDS/DeepTutor55.5K+5.5K655 days ago
    BitterSecurity/Decepticon6.5K—658 days ago
    Category median55.5K+6.6K40—

    Discover Repositories

    Search across tracked repositories by name or description