Suijin

Your team of fully autonomous web app pentesters and red teamers for any situation.

You tell it what to test. It spawns subagents, maps out the attack surface, discusses attack surfaces with the other sessions and gets hacking ! It runs the engagement — recon, exploitation, post-exploitation, report — like a pentester who never gets tired, never skips the boring surfaces, and proves every finding by running the exploit before claiming it, all while you supervise from a beautiful Operator Console watching over what what everyone on the team is doing.

Who it's for

• Bug bounty hunters who can load the program rules, point Suijin at in-scope targets, and get back verified findings — not "the model thinks there's an IDOR here," here's the POC, the output, the marker.
• Pentest teams running authorized engagements. One agent per target, or a whole team on one target — they split lanes, share dead ends, and never re-burn a payload a peer already ruled out.
• CTF players. Flip the profile and the doctrine changes: the flag is the objective, a confirmed bug is a stepping stone, persistence prioritised over tidiness.
• Security researchers who want an agent platform that grades itself — onboard labs with chain-verification tests and bench scoring, so "did my change make the agent better" is a number, not a vibe.

What a run looks like

1. Start it.

suijin lab up

suijin
(mode: type 1)
target: 127.0.0.1:6000

It maps the surface, probes, exploits, escalates to as far as it can go, and writes the report — narrating its reasoning in your terminal the whole way. You can interrupt at any point to redirect it; it can pause between turns, resume saved runs, and pick up an engagement weeks later from its .sje snapshot.

2. Or start a team. Open one terminal per agent. Sessions on the same target find each other, introduce their lanes, and coordinate — while agents on different targets are kept strictly apart.

3. Watch from one screen.

suijin operator

Every running agent on one dashboard: live cards, iteration history, confirmed exploits, the team's chat. Keyboard-first — tab cycles panels, j/k pages the roster, ←→ walks any agent's iteration history. The input box is a command line:

4. Trust the output. A finding only counts when its POC ran and the target produced the expected marker — unique, target-derived strings; 200 OK proves nothing. No match means the exploit comes back with every command and output attached so you can fix or drop it. A finding without a cataloged POC is a rumor.

5. Come back tomorrow. Suijin remembers: blocked patterns, WAF rules, false positives, dead batteries, what worked where. The next engagement — same target or same tech — starts with all of it and skips the graveyard.

Comparison

Safety first

New to it — or new to the agent? Run it against the onboard lab: a multi-service target (15 named services behind a gateway/auth/core plane, ~100+ vulnerability instances, cross-service chains, decoys, 22 flags) that runs on your machine. Sharpen against something that can't get you arrested.

suijin lab up
suijin
press 1
press 1
target: 127.0.0.1:6000

Quick start

# one command (macOS / Linux)
curl -fsSL https://raw.githubusercontent.com/0xwi11iam/Suijin/main/install.sh | bash

# first engagement
suijin engage "http://127.0.0.1:6000 — full assessment"

# watch every agent from one screen
suijin operator

# pipx / uv (installable package)
pipx install suijin

# with the Neo4j knowledge-graph backend (json is the default)
pipx install "suijin[kg]"

# manual
git clone https://github.com/0xwi11iam/Suijin
cd Suijin && pip install -e .

# dev install (live local copy)
pip install -e ".[dev]"

# docker (turnkey)
docker build -t suijin .

_{Authorized security testing only.
On a more serious note, never point Suijin at a system you do not own or lack written permission to test. Unauthorized access is illegal — you accept full responsibility for what you run.}

_{Licensed under AGPL v3.0 · Suijin · By 0xwi11iam(William Jiang)}