{"id":9007,"date":"2026-11-15T06:17:57","date_gmt":"2026-11-15T06:17:57","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles"},"modified":"2026-11-15T06:17:57","modified_gmt":"2026-11-15T06:17:57","slug":"gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles","title":{"rendered":"GitGuardian maps 45 agentic pentest frameworks, finds 11 expose consoles by default"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">GitGuardian&#8217;s research team published a catalog of roughly 45 open-source agentic pentest frameworks on November 9, 2026, each one wiring a language model into a loop that runs offensive tools.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> GitGuardian cataloged 45 open-source agentic pentest frameworks that connect language models to offensive security tools<\/li><li><strong>Exposure:<\/strong> 11 of 41 fingerprinted frameworks serve operator consoles on network ports by default; Shodan found 1,428 ARTEX family services, 419 PentAGI, and 173 Agent Zero instances on November 7, 2026<\/li><li><strong>Risk:<\/strong> Lab test showed a build with no scanner used git and grep to recover 8 of 9 planted credentials, including one deleted a commit after it was added, starting the hunt 6 to 13 seconds in<\/li><li><strong>What to do:<\/strong> Hunt for exposed consoles using GitGuardian&#8217;s fingerprints, revoke all credentials reachable from repositories these agents could read, scan entire repository history<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Researchers found dozens of open-source tools that let attackers connect AI language models to hacking software. These tools can automatically run security tests and search for passwords. Eleven of these tools open a web control panel on the internet by default, and researchers found over 1,400 of them running in the wild. In a test, one tool found 8 out of 9 hidden passwords in under 15 seconds, even recovering a password that had been deleted from the code history. If you run any of these tools, check that your control panel is not exposed to the internet. If you store code or credentials anywhere these tools might reach, treat those credentials as compromised and replace them immediately.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">GitGuardian&#8217;s research team published a catalog of roughly 45 open-source agentic pentest frameworks on November 9, 2026. Each framework wires a language model into a loop that runs offensive tools. The team sorted 32 of them into five families and treated the rest as forks or variants.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ARTEX&#8217;s author took that project down on October 8, 2026, 74 days after its first commit. In the takedown week alone, 102 ARTEX-named repositories and forks appeared.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How the frameworks work<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">GitGuardian sorted the frameworks into five families based on what the loop does:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Network kill chain tools<\/strong> such as PentAGI run reconnaissance through post-exploitation from a Kali container<\/li><li><strong>Web-app and API tools<\/strong> such as Strix test applications<\/li><li><strong>C2-integrated builds<\/strong> run inside frameworks like Mythic<\/li><li><strong>Harnesses<\/strong> wrap a general coding agent with offensive skills<\/li><li><strong>Research prototypes<\/strong> come out of academic work<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Only four builds ship a secret scanner wired to the agent: Pojun, Cybermes, Xalgorix, and AIRecon. GitGuardian notes that the shell and web access these tools hand the model puts a scanner download or a GitHub search one improvised tool call away.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Lab test results<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A lab run published the next day demonstrated the credential-hunting capability. An ARTEX build with no scanner used git and grep to recover 8 of 9 planted credentials, including one deleted a commit after it was added. The tool started hunting 6 to 13 seconds in, even under a prompt that never mentioned secrets.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Exposure findings<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">GitGuardian assessed 41 frameworks for network exposure:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>11 frameworks<\/strong> serve a web UI on a network port by default<\/li><li><strong>18 frameworks<\/strong> do so only in some setups<\/li><li><strong>12 frameworks<\/strong> have no listener at all<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">On November 7, 2026, Shodan matched:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>1,428 services in the ARTEX family<\/li><li>419 PentAGI instances<\/li><li>173 Agent Zero instances, of which 134 sat behind a login and 39 were open<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Risk clusters in a few heavily forked bases rather than the most-starred projects. The most-starred tool in the catalog, Strix, ships no secret-hunting code, while Pojun, with fewer than a hundred stars, wires gitleaks into its worker prompt.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">GitGuardian recommends:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. <strong>Hunt for exposed consoles<\/strong> using the fingerprint descriptions GitGuardian published, not a target list<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. <strong>Revoke credentials<\/strong> rather than deleting them, because the lab run recovered a key from git history one commit after deletion<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. <strong>Scan whole repositories and their history<\/strong>, not only the files at the current commit<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4. <strong>Treat every credential reachable from a repository these agents could read as exposed<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/blog.gitguardian.com\" target=\"_blank\" rel=\"noreferrer noopener\">GitGuardian Research<\/a><\/li><li><a href=\"https:\/\/blog.gitguardian.com\" target=\"_blank\" rel=\"noreferrer noopener\">Lab Run On ARTEX<\/a><\/li><li><a href=\"https:\/\/censys.com\" target=\"_blank\" rel=\"noreferrer noopener\">Censys Exposure Scan<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>GitGuardian cataloged about 45 open-source agentic pentest frameworks, sorted 32 into five families, and found 11 of the 41 it fingerprinted serve an operator console on a network port by default.<\/p>\n","protected":false},"author":2,"featured_media":9006,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"medium","_nx_sec_affected":"Organizations using ARTEX, PentAGI, Agent Zero, Pojun, Cybermes, Xalgorix, AIRecon, Strix, or other agentic pentest frameworks; organizations with credentials in repositories accessible to these tools","_nx_sec_status":"reported","_nx_sec_kicker":"ALERT: AI pentest tools expose operator consoles, hunt credentials in seconds","_nx_sec_type":"ai-attacks","_nx_sec_vendor":"GitGuardian","_nx_sec_fixed":"","_nx_sec_action":"Hunt for exposed consoles using GitGuardian fingerprints and revoke all reachable credentials"},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-9007","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GitGuardian maps 45 agentic pentest frameworks<\/title>\n<meta name=\"description\" content=\"GitGuardian cataloged 45 agentic pentest frameworks, found 11 of 41 fingerprinted tools expose operator consoles on network ports by default.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GitGuardian maps 45 agentic pentest frameworks\" \/>\n<meta property=\"og:description\" content=\"GitGuardian cataloged 45 agentic pentest frameworks, found 11 of 41 fingerprinted tools expose operator consoles on network ports by default.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-15T06:17:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"GitGuardian maps 45 agentic pentest frameworks, finds 11 expose consoles by default\",\"datePublished\":\"2026-11-15T06:17:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles\"},\"wordCount\":654,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-15T06:17:57+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles\",\"name\":\"GitGuardian maps 45 agentic pentest frameworks\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp\",\"datePublished\":\"2026-11-15T06:17:57+00:00\",\"description\":\"GitGuardian cataloged 45 agentic pentest frameworks, found 11 of 41 fingerprinted tools expose operator consoles on network ports by default.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GitGuardian maps 45 agentic pentest frameworks, finds 11 expose consoles by default\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GitGuardian maps 45 agentic pentest frameworks","description":"GitGuardian cataloged 45 agentic pentest frameworks, found 11 of 41 fingerprinted tools expose operator consoles on network ports by default.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles","og_locale":"en_US","og_type":"article","og_title":"GitGuardian maps 45 agentic pentest frameworks","og_description":"GitGuardian cataloged 45 agentic pentest frameworks, found 11 of 41 fingerprinted tools expose operator consoles on network ports by default.","og_url":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles","og_site_name":"i10X News","article_published_time":"2026-11-15T06:17:57+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"GitGuardian maps 45 agentic pentest frameworks, finds 11 expose consoles by default","datePublished":"2026-11-15T06:17:57+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles"},"wordCount":654,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-15T06:17:57+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles","url":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles","name":"GitGuardian maps 45 agentic pentest frameworks","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp","datePublished":"2026-11-15T06:17:57+00:00","description":"GitGuardian cataloged 45 agentic pentest frameworks, found 11 of 41 fingerprinted tools expose operator consoles on network ports by default.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/gitguardian-maps-45-agentic-pentest-frameworks-exposed-consoles#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"GitGuardian maps 45 agentic pentest frameworks, finds 11 expose consoles by default"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/9007","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=9007"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/9007\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/9006"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=9007"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=9007"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=9007"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=9007"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=9007"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}