Insomnia - Autonomous AI pentesting suite
Insomnia is an autonomous AI-driven penetration testing and security suite designed to audit applications, APIs, networks, and Active Directory environments around the clock. By combining specialized AI personas with traditional vulnerability scanning, the platform automates complex red team workflows from initial reconnaissance to exploit validation and report generation.
Key Features
- Autonomous AI Red Team: Deploys specialized AI personas that collaborate to locate vulnerabilities, test attack chains, and verify exploits through a single command line or graphical interface.
- Comprehensive Web DAST: Integrates over 275 active scanning modules covering OWASP Top 10 categories, including SQL injection, cross-site scripting, and server-side request forgery.
- Static Analysis CLI: Provides a free static-analysis command line interface to scan source code, detect embedded secrets, and audit dependencies before shipping.
- CI/CD Pipeline Integration: Embeds security checks, container audits, and deployment gates directly into existing continuous integration workflows with customizable YAML configurations.
- Active Directory Auditing: Enumerates domain controllers, tests for Kerberoasting, analyzes access paths, and maps lateral movement vulnerabilities.
- Professional Reporting: Generates executive-ready PDF, HTML, and JSON reports complete with CVSS scoring, technical evidence, and actionable remediation steps.
Built for security professionals, penetration testers, and development teams, Insomnia consolidates fragmented security toolchains into a unified platform. Available across multiple tiers including community editions, a free SAST CLI, and paid Pro and Advanced plans for broader operational capabilities.
