
Open-source autonomous penetration testing platform with 18 AI agents, 80+ integrated tools, live dashboard and publication-ready reports.
Open-source autonomous penetration testing platform with 18 AI agents, 80+ integrated tools, live dashboard and publication-ready reports.
Darkmoon is an open-source, AI-powered autonomous penetration testing platform that orchestrates specialized agents and security tools to discover, validate, and document vulnerabilities. It combines 18 purpose-built AI agents with 80+ integrated security tools to automate reconnaissance, exploitation, evidence collection, and report generation. The platform provides a live dashboard for real-time monitoring and generates publication-ready reports with reproducible evidence, enabling security teams and researchers to scale assessments and streamline pentest workflows. Released under GPLv3, Darkmoon emphasizes extensibility, transparency, and reproducible results for red teams and security engineers.

Darkmoon is an advanced autonomous offensive security platform designed to execute comprehensive penetration-testing campaigns. Utilizing 18 AI agents and over 80 specialized tools, Darkmoon automates vulnerability assessments, mimicking real-world attack scenarios to help organizations identify and mitigate security risks effectively.
Darkmoon revolutionizes the field of cybersecurity by providing a fully autonomous solution for conducting penetration tests. Unlike traditional methods that require significant human involvement, Darkmoon leverages its advanced AI technology to simulate real-world attack scenarios, which allows for a more thorough examination of an organization’s security posture.
By implementing Darkmoon, organizations can significantly enhance their security measures, ensuring they are prepared against evolving cyber threats while saving time and resources through automation.
Darkmoon operates by utilizing a Multi-Agent Dispatch system, where a master agent detects various technology signals and assigns tasks to specialized agents. It integrates over 80 tools for comprehensive security assessments, provides real-time insights via a live dashboard, and generates publication-ready compliance reports for authorized penetration testing.
Darkmoon is an advanced penetration testing platform designed to streamline security assessments through automation and integration. Here’s how it works:
Multi-Agent Dispatch: At its core, Darkmoon features a master agent that detects 14 different technology signals. These signals inform the system about the current state of the target environment. The master agent then routes campaigns to 18 specialized agents, which can operate either sequentially or in parallel, optimizing resource use and response times.
Integrated Tools: Darkmoon includes over 80 integrated tools, such as nuclei for vulnerability scanning, sqlmap for SQL injection testing, ffuf for fuzzing, BloodHound for Active Directory analysis, and Impacket for network attacks. This extensive toolkit allows for a comprehensive approach to security testing across various domains, including web applications, Kubernetes clusters, and Active Directory environments.
Live SSE Dashboard: The platform features a sophisticated live dashboard that streams every finding and event in real-time. This command center allows users to monitor infrastructure nodes and agent activities, providing instant visibility into the security posture of their systems.
Publication-Ready Reports: Darkmoon facilitates compliance by generating reports in formats suitable for ISO 27001, HackerOne, and Bugcrowd. Reports include CVSS 3.1 scoring and mapping to the MITRE ATT&CK framework, ensuring that findings are actionable and easily interpretable by stakeholders.
Hardened Runtime: Security is paramount, and Darkmoon employs sealed AES-256 storage, hardware-bound licensing, and a continuous integrity watchdog to protect sensitive data and ensure system reliability.
Darkmoon offers essential features like Multi-Agent Dispatch, which intelligently routes campaigns; an extensive library of 80+ integrated tools; a live SSE dashboard for real-time monitoring; publication-ready reports for compliance standards; and a hardened runtime focused on security.
Darkmoon stands out in the cybersecurity landscape with its innovative features designed for efficiency and security.
This feature employs a master agent that detects 14 technology signals, enabling the system to intelligently route campaigns to 18 specialized agents, either sequentially or in parallel. This not only optimizes resource allocation but also accelerates response times during security assessments.
Darkmoon seamlessly integrates over 80 tools, including nuclei for vulnerability scanning, sqlmap for SQL injection testing, ffuf for fuzzing, BloodHound for Active Directory enumeration, and Impacket for network protocols. These tools cover various domains such as reconnaissance, web security, Kubernetes security, and Active Directory assessments, making Darkmoon a versatile choice for security professionals.
The live SSE dashboard streams every finding, infrastructure node, and agent event to a centralized command center in real-time. This feature enhances situational awareness and allows security teams to react swiftly to emerging threats.
Darkmoon simplifies compliance with its ability to export reports in ISO 27001, HackerOne, and Bugcrowd formats. Each report is detailed with CVSS 3.1 scoring and MITRE ATT&CK mapping, ensuring that stakeholders receive comprehensive insights into security posture and vulnerabilities.
With a focus on security, Darkmoon employs sealed AES-256 storage, hardware-bound licensing, and a continuous integrity watchdog to safeguard sensitive data against unauthorized access and tampering.
Darkmoon is designed for cybersecurity professionals, ethical hackers, and organizations seeking to enhance their security posture. It caters to those conducting authorized penetration tests, performing attack surface mapping, generating compliance reports, augmenting security teams with AI, and facilitating continuous security assessments.
Darkmoon is a powerful tool for professionals in cybersecurity, particularly those involved in penetration testing and vulnerability assessments. It offers several key features:
Authorized Penetration Testing: Darkmoon allows users to conduct comprehensive security assessments on systems they have permission to test. This is critical for identifying vulnerabilities before they can be exploited by malicious actors. The tool automates various processes, making it easier to simulate real-world attacks.
Attack Surface Mapping: With Darkmoon, users can automatically model a target's infrastructure and technology stack. This feature helps organizations visualize their attack surface, identifying potential entry points for attackers. By understanding their digital landscape, organizations can prioritize their security efforts effectively.
Compliance Reporting: Darkmoon simplifies the compliance reporting process by generating formatted findings that align with industry standards such as ISO 27001, HackerOne, and Bugcrowd. Reports include essential details such as CVSS scores and MITRE ATT&CK mappings, making it easier for organizations to demonstrate their security compliance.
Security Team Augmentation: The AI agents in Darkmoon can coordinate multiple security tools, enhancing the efficiency of security teams. This allows teams to focus on higher-level analysis and incident response rather than being bogged down by manual tool management.
Continuous Assessment: Darkmoon supports scheduling of recurring security campaigns, enabling organizations to maintain ongoing vigilance. The live dashboard tracks results in real-time, providing a clear view of security posture over time.
Darkmoon is a premium product with pricing that varies based on the features you choose. To find the most accurate and up-to-date pricing, visit the official Darkmoon website, where you can explore various plans and their respective costs.
Darkmoon is designed to cater to specific needs, whether for individuals or businesses. The pricing typically includes several tiers, allowing users to select a plan that best fits their requirements. For instance, you might find basic plans that cover essential features, while advanced plans could offer enhanced capabilities, such as additional user access, customization options, or priority support.
To give you a clearer idea of what to expect, here’s a breakdown of potential pricing tiers:
Always check the official Darkmoon site for current pricing and specific features included in each plan, as these can change frequently.
By staying informed and comparing your options, you can make a well-informed decision about your investment in Darkmoon.
To get started with Darkmoon, visit https://dark-moon.org/ to sign up for an account. Once registered, you can explore its features, tools, and community resources to maximize your experience with this innovative platform.
Starting your journey with Darkmoon is straightforward. First, navigate to Darkmoon’s official website. Click on the "Sign Up" button, where you’ll be prompted to fill in your email address, create a strong password, and verify your account through an email confirmation link.
After successful registration, log in to access the dashboard. Here, you can explore various features like project management tools, collaboration spaces, and analytics dashboards designed to enhance productivity. For example, Darkmoon offers customizable templates that cater to different project needs, ensuring a tailored experience.
Additionally, take advantage of the tutorials and guides available on the platform to deepen your understanding of its capabilities. You can also check out user forums where you can ask questions and share insights with other Darkmoon users.
By following these steps and utilizing the available resources, you will be well on your way to effectively using Darkmoon for your projects and collaborations.
Browse by use case: Automation & Productivity
Compare Darkmoon: vs jcode · vs HarnessRouter · vs AgentLoop · vs ACME.BOT