METATRON
Offline AI agent that runs your pentest tools and writes the report
METATRON is an open-source, fully offline AI penetration testing assistant for Linux (Parrot OS / Debian). It orchestrates real recon and vuln-scanning tools — nmap, nikto, whois, dig, and more — feeds their output into a locally-hosted fine-tuned Qwen model via Ollama, and runs an agentic analysis loop to surface actionable findings. No data ever leaves your machine. The project is designed for security professionals who want AI-assisted analysis without shipping sensitive network topology or target data to a cloud API. After each recon phase, the model synthesizes results, chooses follow-up scans, and iterates until it has a complete picture. Final output is exported as a PDF or HTML report. Picking up nearly 400 GitHub stars within 48 hours of its April 2 release, METATRON taps into a real gap: AI copilots for pentesters that actually respect operational security. With Ollama handling local inference and no subscription required, the barrier to entry is just a GPU and a weekend.
Panel Reviews
The Builder
Developer Perspective
“Finally a pentest assistant that doesn't phone home. The agentic loop between recon tools and the local Qwen model is genuinely clever — it actually chooses follow-up scans based on initial findings rather than just dumping raw output at you. Setup takes maybe 30 minutes if you have Ollama running.”
The Skeptic
Reality Check
“A fine-tuned Qwen running locally against nmap output isn't going to out-analyze a seasoned pentester. The model will hallucinate CVEs, miss context-dependent vulnerabilities, and produce reports that look authoritative but need heavy review. Useful as a research assistant, not a replacement for real expertise.”
The Futurist
Big Picture
“The real story here is the architecture: a local agent that uses real tools as its hands, with zero cloud dependency. As LLMs get better at reasoning about network state, this pattern — fully air-gapped AI operators — will become standard kit for any org that handles sensitive infrastructure.”
The Creator
Content & Design
“The PDF/HTML report export is the sleeper feature here. For freelance pentesters who spend half their time formatting findings into deliverables, automated report generation alone justifies the install. Would love to see customizable report templates.”
Community Sentiment
“Air-gapped operation and no cloud dependency praised heavily”
“r/netsec: 'First pentest tool AI that I'd actually use on a real engagement'”
“Security community excited about fully offline AI pentest automation”