yashab-cyber/HackGpt

What it solves

HackGPT Enterprise is an AI-powered penetration testing platform designed for enterprise security teams to automate and professionalize cybersecurity assessments. It streamlines the complex process of finding vulnerabilities, analyzing risks, and ensuring compliance with industry standards like OWASP and NIST.

How it works

The platform uses a microservices architecture deployed via Docker and Kubernetes, integrating a multi-provider AI engine (supporting OpenAI, Anthropic, Google, DeepSeek, and local LLMs via Ollama) to power its security analysis. It follows a six-phase penetration testing methodology: intelligence gathering, scanning, vulnerability assessment, exploitation, reporting, and verification. It also includes a SOC analysis engine for log parsing and SIEM integration (Splunk, QRadar, Elasticsearch) to correlate attack timelines and detect anomalies.

Who it’s for

Enterprise security teams, professional penetration testers, and SOC analysts who need a scalable, AI-enhanced tool for vulnerability discovery and compliance mapping.

Highlights

• Multi-Provider AI Engine: Supports over 26 models across 7 providers with runtime model switching and automatic fallback.
• Cloud-Native Infrastructure: Built with microservices, Consul for service discovery, and Nginx for load balancing.
• SOC & SIEM Integration: Native connectors for Splunk, IBM QRadar, and Elasticsearch for real-time event correlation.
• Compliance Automation: Automated mapping and reporting for OWASP, NIST, ISO27001, SOC2, and PCI-DSS.
• Enterprise-Grade Security: Features RBAC, LDAP/Active Directory integration, and AES-256-GCM encryption.