samugit83/redamon
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.
3.1k stars · 631 forks · Python
Caution
Caution: one person wrote most of the recent commits.
Why
- One person wrote 97% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)
What would change this
- A second person takes a substantial share of commits.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.)
Maintenance
PartialActive
- Human commits, 30 days
- 462
- Human commits, 90 days
- 946
- Human commits, 365 days
- 1.6k
- Bot share of commits, 365 days
- 0%
- Last commit
- Oct 14, 2026 (15 hours ago)
- Last human commit
- Oct 14, 2026 (15 hours ago)
- Authors, 90 days
- 5
- Last release
- Sep 11, 2026 (1 month ago)
- Median PR merge time
- 31 hours
Responsiveness: of 29 recent issues, 83% got a maintainer reply. Median first response: 23 hours.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
- Authors in the last 90 days are counted from the sampled commits only.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Personal account
- Commits sampled
- 500 since Oct 15, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 1
- Contributors
- 14
Top committers
- samugit83: 97% of commits
- xdCloudy: 2% of commits
- harispyn: 0% of commits
- NikolasBielski: 0% of commits
- binarytrails: 0% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteMostly organic, confidence medium
Bursts
- Feb 8, 2026 to Mar 12, 2026: about 1.5k more stars than usual, peak 224 in one day, a spike that tapers off. We couldn't check for an outside explanation.
- Jun 29, 2026 to Jul 2, 2026: about 85 more stars than usual, peak 32 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Sep 21, 2026 to Sep 24, 2026: about 81 more stars than usual, peak 46 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Sep 27, 2026 to Oct 1, 2026: about 271 more stars than usual, peak 98 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- Anyone can buy stars for any repo, so this describes the star history only.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- MIT (OSI-approved)
- A year ago
- Not known
Packages
No published packages found.
Sources: GitHub: samugit83/redamon
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/samugit83/redamon)Earlier verdicts
- Oct 15, 2026: Caution
- Oct 14, 2026: Caution