Show HN: An agent harness for long-running pentests and code audits

Category: security

Tags: security, ai-agents, pentesting, code-audit, bug-bounty

Score: 7.5/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 7)

Vigil is an AI harness that coordinates agent clients like Claude Code and Codex to perform long-running security audits and pentests. It orchestrates multi-pass investigations, maintains findings across sessions, and includes runtime reproduction and evidence tracking. The project demonstrates real-world utility, having been used to reach top ranks on HackerOne.

Target audience: security engineers, bug bounty hunters, application security teams

Repository: https://github.com/VigilOSS/Vigil · Python · Apache-2.0 · 29 stars

View on Hacker News