Credentials. LLM keys and API tokens live in the deployment config; restrict access to the server.
Who it is forA security engineer with a signed scope who wants the routine recon and testing done faster.
The problemManual pentests repeat the same recon and tool runs on every engagement.
The outcomeA flow report with findings and exploitation notes, viewable on the web or downloadable as Markdown or PDF.
What you need first
- Docker and Docker Compose (an interactive installer sets it up on Linux, macOS or Windows)
- An LLM provider key or a local model via Ollama or vLLM
- Written authorization to test every target
Steps
- Install with the interactive installer (Docker Compose)
- Configure an LLM provider
- Log in to the web UI and start a flow with the target and goal in plain language
- Watch agents run tools such as nmap and sqlmap in the Docker sandbox
- Review and download the report
Prompt for your agent
Help me install vxcontrol/pentagi with Docker Compose on an isolated lab server, configure <provider>, and run a flow against my own test VM at <lab address> only. Confirm the scope before starting.
Caveat. Only test systems you own or have written permission to test; unauthorized scanning is illegal in most countries.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for vxcontrol/pentagi and "Run an authorized pentest with a team of AI agents"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer