# pentest-agents alternatives: 12 Claude Code plugins like h-mmer/pentest-agents Flowy lists 167 other Security plugins like pentest-agents, ranked by shared technologies, then GitHub stars; nothing in this list is paid. Published: Oct 23, 2026 · Updated: Oct 29, 2026 · Author: Flowy Canonical: https://www.flowy.sh/alternatives/h-mmer-pentest-agents ## How they compare | Plugin | Stars | 7 days | Updated | License | Contains | | --- | ---: | ---: | ---: | --- | --- | | [pentest-agents](https://www.flowy.sh/listings/h-mmer-pentest-agents) | 1,038 | +18 | Jun 12, 2026 | – | 39 skills, 50 agents, 3 hooks, 2 MCP servers | | [awarexone-agentic-bug-hunter](https://www.flowy.sh/alternatives/awarexone-agentic-bug-hunter) | 5,478 | +91 | Oct 28, 2026 | MIT | 19 skills, 9 agents, 42 commands, 3 hooks | | [shuvonsec-claude-bug-bounty](https://www.flowy.sh/alternatives/shuvonsec-claude-bug-bounty) | 5,478 | +91 | Oct 28, 2026 | MIT | 19 skills, 9 agents, 42 commands, 3 hooks | | [hello-js-reverse-skill](https://www.flowy.sh/alternatives/whitenightshadow-hello-js-reverse-skill) | 1,380 | – | Sep 8, 2026 | – | 1 skill | | [prismor](https://www.flowy.sh/listings/prismorsec-prismor) | 461 | +43 | Oct 28, 2026 | Apache-2.0 | 1 skill | | [torch](https://www.flowy.sh/listings/encod3d-sec-torch) | 336 | +3 | Sep 1, 2026 | MIT | 56 skills | | [sonarqube](https://www.flowy.sh/listings/sonarsource-sonarqube-agent-plugins) | 113 | – | Oct 29, 2026 | – | 10 skills, 1 agent | | [reverse-skill](https://www.flowy.sh/alternatives/zhaoxuya520-reverse-skill) | 43,557 | +733 | Sep 22, 2026 | MIT | 46 skills | | [ida-pro-mcp](https://www.flowy.sh/alternatives/mrexodia-ida-pro-mcp) | 13,196 | +124 | Sep 26, 2026 | MIT | 1 skill | | [claude-bughunter](https://www.flowy.sh/alternatives/elementalsouls-claude-bughunter) | 5,340 | +130 | Oct 28, 2026 | MIT | 83 skills, 15 commands | | [claude-osint](https://www.flowy.sh/alternatives/elementalsouls-claude-osint) | 2,881 | +43 | Oct 20, 2026 | MIT | 10 skills | | [kenryu42-cc-safety-net](https://www.flowy.sh/alternatives/kenryu42-cc-safety-net) | 1,827 | +104 | Oct 27, 2026 | MIT | 2 skills, 1 hook | | [kenryu42-claude-code-safety-net](https://www.flowy.sh/alternatives/kenryu42-claude-code-safety-net) | 1,827 | +104 | Oct 27, 2026 | MIT | 2 skills, 1 hook | ## The 12 closest alternatives 1. [awarexone-agentic-bug-hunter](https://www.flowy.sh/listings/awarexone-agentic-bug-hunter) (5,478 stars, +91 this week). AI-powered bug bounty hunting toolkit that works with or without subscription. [awarexone-agentic-bug-hunter on Flowy](https://www.flowy.sh/listings/awarexone-agentic-bug-hunter) · [awarexone-agentic-bug-hunter alternatives](https://www.flowy.sh/alternatives/awarexone-agentic-bug-hunter) 2. [shuvonsec-claude-bug-bounty](https://www.flowy.sh/listings/shuvonsec-claude-bug-bounty) (5,478 stars, +91 this week). AI-powered bug bounty hunting toolkit that works with or without subscription. [shuvonsec-claude-bug-bounty on Flowy](https://www.flowy.sh/listings/shuvonsec-claude-bug-bounty) · [shuvonsec-claude-bug-bounty alternatives](https://www.flowy.sh/alternatives/shuvonsec-claude-bug-bounty) 3. [hello-js-reverse-skill](https://www.flowy.sh/listings/whitenightshadow-hello-js-reverse-skill) (1,380 stars). 面向 Web API 通用采集、接口签名分析与改版回归的 Skill。已有协议与样本时直接验证 Node.js/Python 调用；需要页面取证时使用 Camoufox MCP 捕获网络、定位源码和调试 Hook，再交付可验证的采集程序。. [hello-js-reverse-skill on Flowy](https://www.flowy.sh/listings/whitenightshadow-hello-js-reverse-skill) · [hello-js-reverse-skill alternatives](https://www.flowy.sh/alternatives/whitenightshadow-hello-js-reverse-skill) 4. [prismor](https://www.flowy.sh/listings/prismorsec-prismor) (461 stars, +43 this week). Self-hosted runtime control plane for AI agents. [prismor on Flowy](https://www.flowy.sh/listings/prismorsec-prismor) 5. [torch](https://www.flowy.sh/listings/encod3d-sec-torch) (336 stars, +3 this week). An AI-powered penetration testing and bug-bounty knowledge base and automation harness for Claude Code. [torch on Flowy](https://www.flowy.sh/listings/encod3d-sec-torch) 6. [sonarqube](https://www.flowy.sh/listings/sonarsource-sonarqube-agent-plugins) (113 stars). Made by Sonar SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs… [sonarqube on Flowy](https://www.flowy.sh/listings/sonarsource-sonarqube-agent-plugins) 7. [reverse-skill](https://www.flowy.sh/listings/zhaoxuya520-reverse-skill) (43,557 stars, +733 this week). Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain… [reverse-skill on Flowy](https://www.flowy.sh/listings/zhaoxuya520-reverse-skill) · [reverse-skill alternatives](https://www.flowy.sh/alternatives/zhaoxuya520-reverse-skill) 8. [ida-pro-mcp](https://www.flowy.sh/listings/mrexodia-ida-pro-mcp) (13,196 stars, +124 this week). Simple MCP Server to allow vibe reversing in IDA Pro. [ida-pro-mcp on Flowy](https://www.flowy.sh/listings/mrexodia-ida-pro-mcp) · [ida-pro-mcp alternatives](https://www.flowy.sh/alternatives/mrexodia-ida-pro-mcp) 9. [claude-bughunter](https://www.flowy.sh/listings/elementalsouls-claude-bughunter) (5,340 stars, +130 this week). A self-contained Claude skill bundle for bug hunting and external red-team work · 83 skills · 15 slash commands · 681 disclosed-report… [claude-bughunter on Flowy](https://www.flowy.sh/listings/elementalsouls-claude-bughunter) · [claude-bughunter alternatives](https://www.flowy.sh/alternatives/elementalsouls-claude-bughunter) 10. [claude-osint](https://www.flowy.sh/listings/elementalsouls-claude-osint) (2,881 stars, +43 this week). 8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path… [claude-osint on Flowy](https://www.flowy.sh/listings/elementalsouls-claude-osint) · [claude-osint alternatives](https://www.flowy.sh/alternatives/elementalsouls-claude-osint) 11. [kenryu42-cc-safety-net](https://www.flowy.sh/listings/kenryu42-cc-safety-net) (1,827 stars, +104 this week). A pre-execution guard for AI coding agents. [kenryu42-cc-safety-net on Flowy](https://www.flowy.sh/listings/kenryu42-cc-safety-net) · [kenryu42-cc-safety-net alternatives](https://www.flowy.sh/alternatives/kenryu42-cc-safety-net) 12. [kenryu42-claude-code-safety-net](https://www.flowy.sh/listings/kenryu42-claude-code-safety-net) (1,827 stars, +104 this week). A pre-execution guard for AI coding agents. [kenryu42-claude-code-safety-net on Flowy](https://www.flowy.sh/listings/kenryu42-claude-code-safety-net) · [kenryu42-claude-code-safety-net alternatives](https://www.flowy.sh/alternatives/kenryu42-claude-code-safety-net) ## Questions about pentest-agents alternatives ### What is the best alternative to pentest-agents? awarexone-agentic-bug-hunter is the first of 12 alternatives to pentest-agents by shared technologies: it has 5,478 stars (ahead of pentest-agents), gained 91 stars this week and ships 42 commands, which pentest-agents does not. ### Which pentest-agents alternative has the most skills? claude-bughunter has the most, with 83 skills of the 12 alternatives listed. pentest-agents has 39. ## Related - [Security plugins on Flowy](https://www.flowy.sh/listings/category/security) - [Browse all skills](https://www.flowy.sh/skills) - [Browse all agents](https://www.flowy.sh/agents) - [Browse all hooks](https://www.flowy.sh/hooks) - [Browse all MCP servers](https://www.flowy.sh/mcp) - [pentest-agents on Flowy](https://www.flowy.sh/listings/h-mmer-pentest-agents)