# open·kritt

> Self-hosted open-source tool that coordinates AI agents to discover and verify code vulnerabilities using targeted workflows and concurrent analysis.

- **Category:** Security
- **Licence:** AGPL-3.0
- **Latest version:** v1.4.1
- **Open source:** oss
- **Languages:** JavaScript, Python
- **Tags:** Ai Agents, Security Tools, AI, Docker Compose, Agpl 3.0, Self Hosted, Codex, Claude code, Ai security, Openrouter, Security automation, Vulnerability scanner, Security research, Bug Bounty, Code Security, Bugbounty Tools, Hackenproof, Hackerone, Immunefi, Source Code Analysis

## Description

open·kritt is a self-hosted security research platform that breaks codebase analysis into small tasks run by AI agents at the same time. It serves security researchers and developers who want full command over their setup. The system creates reusable workflows from chained prompts, scans local or remote repositories using Codex, Anthropic's Claude Code, or xAI's Grok Build, verifies findings with post-scripts that confirm exploitability and build proofs of concept, exports complete scan results as ZIP archives with manifests, and ranks results through custom severity rules and automatic de-duplication. It runs via Docker Compose with a repository-local CLI (./kritt) that handles environment setup and model access configuration. The backend API has no authentication by default and must be protected by network isolation or a reverse proxy. The project uses the AGPL-3.0 license and is maintained by two developers.

## Links

- [Homepage](https://github.com/kritt-ai/open-kritt)
- [Website](https://kritt.ai/)
- [Documentation](https://docs.kritt.ai)
- [GitHub Repository](https://github.com/Kritt-ai/open-kritt)
- [Discord Community](https://discord.gg/JJr2CbBjc)
- [X (Twitter)](https://x.com/Kritt_AI)
- [Launch Article](https://kritt.ai/open-kritt-launch)
- [Security Policy](https://github.com/Kritt-ai/open-kritt/blob/main/SECURITY.md)

---
Source: https://selfhost.directory/project/open-kritt