The open-source, all-in-one security platform. LLM RedTeam, AI, DAST, SAST, VAPT, API security, CNAPP (KSPM/KIEM/CWPP/ASPM), AI red teaming + AI-SPM, SBOM, IaC, and compliance (OWASP / PCI-DSS / SOC 2 / ISO 27001 / NIST / HIPAA) ā one workflow, audit-grade evidence. Free, forever, and self-hostable under the GNU AGPL-3.0 licence.
Fin Startups get Fin free for a year + 93% off Intercom
Promoted
Maker
š
Hey Product Hunt š,
I built Pencheff to make professional security testing accessible without the $2,000+ monthly price tags common among enterprise tools. Its core platform is free, with unlimited assessments, targets, seats, scan modules, compliance mapping, and formal reports. Pencheff tests web apps, APIs, code, CI/CD, cloud, containers, networks, LLMs, AI agents, MCP servers, RAG systems, mobile apps, firmware, IoT, OT/ICS/SCADA, and more. It verifies vulnerabilities, uncovers attack chains, and uses AI to explain findings and propose practical fixes. You can also use Pencheff free through MCP inside Codex, Claude Code, Cursor, Cline, Continue, Zed, and other compatible coding agents. Iād love your feedback! š”ļø