CYPHEX
Multi-agent cyber defense system: 11 agents run recon, crawling and parallel exploitation against a target, then write a pentest report and code patches.
- Design and engineering
- 2026
- Open source
- Python
- FastAPI
- Scikit-learn
- LLM APIs
11
Specialised agents
5
Pipeline stages
~70%
Less manual audit effort
Problem
Security audits of web applications are repetitive: map the app, try the usual attacks, write up what broke. Most of that effort is manual.
Approach
CYPHEX is a dynamic application security testing pipeline built on a multi-agent architecture. It runs real terminal commands through an asyncio subprocess engine (curl, nmap and similar) rather than simulating attacks, and uses an LLM only to write the report and the fixes.
The pipeline
- Reconnaissance. Gathers headers and the tech stack and probes for sensitive files.
- Crawling. Maps endpoints and parses forms and parameters for targeted fuzzing.
- Exploitation. Seven agents run in parallel: SQL injection, XSS, authentication, command injection, file inclusion, business logic (IDOR, SSRF, CORS) and supply chain.
- Analysis. Condenses the terminal history into a formal pentest report.
- Remediation. Produces framework-specific code patches and a cure plan.
Outcome
Eleven agents share the work, cutting manual audit effort by roughly 70%. A bundled test app with 14+ intentional vulnerabilities lets anyone try it safely. The code is open source.
