0x4m4/hexstrike-ai
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
12.8k stars · 2.6k forks · Python
Caution
Caution: the median first response takes over 30 days.
Why
- Maintainers took a median of 42 days to first respond to 12 recent issues. (source 1, source 2, source 3, source 4)
What would change this
- Maintainers reply faster, with a median under 30 days.
- Partly checked: people (Only 3 human commits were found, too few to judge who maintains the project.)
Maintenance
CompleteSteady
- Human commits, 30 days
- 0
- Human commits, 90 days
- 1
- Human commits, 365 days
- 3
- Bot share of commits, 365 days
- 0%
- Last commit
- Aug 3, 2026 (2 months ago)
- Last human commit
- Aug 3, 2026 (2 months ago)
- Authors, 90 days
- 1
- Last release
- none found
- Median PR merge time
- n/a
Responsiveness: of 12 recent issues, 17% got a maintainer reply. Median first response: 42 days.
Sources: Commits, Releases, Merged pull requests, Issues
People
Partial- Owner
- Personal account
- Commits sampled
- 3 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 1
- Contributors
- 2
Top committers
- 0x4m4: 100% of commits
- Only 3 human commits were found, too few to judge who maintains the project.
Sources: Commits, Contributors
Stars
CompleteMostly organic, confidence high
Bursts
- Aug 14, 2025 to Sep 22, 2025: about 3.2k more stars than usual, peak 374 in one day, a spike that tapers off. We couldn't check for an outside explanation.
- Dec 1, 2025 to Dec 2, 2025: about 49 more stars than usual, peak 51 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jun 1, 2026 to Jun 7, 2026: about 269 more stars than usual, peak 119 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jul 30, 2026 to Jul 31, 2026: about 83 more stars than usual, peak 69 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Aug 16, 2026 to Aug 17, 2026: about 69 more stars than usual, peak 55 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 8, 2026 to Sep 10, 2026: about 100 more stars than usual, peak 83 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 27, 2026 to Sep 28, 2026: about 57 more stars than usual, peak 57 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Oct 4, 2026 to Oct 7, 2026: about 142 more stars than usual, peak 73 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- 4 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- Anyone can buy stars for any repo, so this describes the star history only.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- MIT (OSI-approved)
- A year ago
- Not known
Packages
No published packages found.
Sources: GitHub: 0x4m4/hexstrike-ai
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/0x4m4/hexstrike-ai)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 14, 2026: Caution