Dark Moon

Darkmoon is an autonomous AI penetration testing platform that orchestrates 18 specialized AI agents and over 80 integrated security tools to continuously assess web applications, cloud infrastructure, Active Directory, and Kubernetes environments. Instead of merely scanning, Darkmoon reasons about targets, models attack surfaces, and dispatches agents with dynamic cascade control—executing real exploits and chaining attack paths to deliver proof-based vulnerabilities. Built for professional pentesters and red teams seeking scalable, continuous offensive security, Darkmoon automates reconnaissance, exploitation, and reporting. It streams live findings via SSE to a command center dashboard, maps infrastructure graphs, and generates ISO 27001, HackerOne, and Bugcrowd-compatible reports with CVSS 3.1 scoring and MITRE ATT&CK mappings. Its core engine detects 14 technology signals from the target and routes campaigns to the right specialists—sequential or parallel—with cascade depth capped at three levels to prevent runaway recursion. The runtime is hardened with AES-256 sealed storage, hardware-bound licensing, and a continuous integrity watchdog. Darkmoon offers both a GPLv3 open-source Community edition and a paid Pro tier with additional features like a hardened runtime and priority support, plus a Custom tier for enterprises. A live demo dashboard shows recent campaigns: the latest (Apr 26, 2026) found 57 vulnerabilities in 28.5 minutes, including 8 critical, 24 high, 21 medium, 4 low. Darkmoon is not a simple scanner—it's an autonomous security conductor that reasons and executes offensive campaigns end-to-end.