Tengu

About

Tengu is an AI-powered Model Context Protocol (MCP) server that transforms Claude into a sophisticated penetration testing copilot. It automates crucial phases like reconnaissance and scanning while ensuring human control over sensitive or destructive actions. Designed for pentesters, red teamers, security students, and consulting firms, Tengu integrates a vast array of security tools, offers pre-built workflows, and includes robust safety mechanisms like target allowlisting, input sanitization, and audit logging to facilitate ethical and efficient security assessments.

Key Features

• Built-in Safety Controls: Features target allowlisting, input sanitization, rate limiting, and audit logging.
• Automated Reporting: Correlates findings and generates professional penetration test reports in MD, HTML, or PDF formats.
• Extensive Tool Integration: Orchestrates 56 security tools including Nmap, Metasploit, SQLMap, Nuclei, and OWASP ZAP.
• AI-Orchestrated with Claude: Leverages AI to intelligently decide the next tool based on previous findings.
• Human-in-the-Loop for Exploits: Requires explicit confirmation for destructive actions like Metasploit module execution.
• 3 GitHub stars

Use Cases

• Automating reconnaissance and scanning in penetration tests.
• Providing a safe, controlled environment for security students to practice ethical hacking.
• Assisting red teams with efficient tool orchestration and reporting.