Watchtower

AI-powered penetration testing automation, orchestrated by LLM agents.

Documentation · Quick Start · Tools · Troubleshooting

---

Watchtower is an AI-powered penetration testing automation CLI that uses LLMs and LangGraph to orchestrate agentic workflows against your own websites, then turns the results into useful pentest reports.

[!WARNING] Penetration testing is a red-team activity and must only be performed with explicit permission. See the Legal Disclaimer before you begin.

Features

• Multi-agent architecture: a Planner picks the next tools, a Worker runs them (in parallel when asked), an Analyst turns every tool's output into structured findings, and a Logic Analyst looks for business-logic and IDOR risk.
• 28 integrated security tools across network, web recon, crawling and URL discovery, DNS, vulnerability, TLS, content discovery, and secret scanning. See Tools.
• Parallel reconnaissance and smart truncation of long tool output.
• Run history in SQLite with per-run PDF reports.
• LLM-agnostic: OpenAI, Gemini, OpenRouter, Anthropic, LiteLLM, or any OpenAI-compatible endpoint, with opt-in flagship models and reasoning controls.

Quick Start

Requires Python 3.10+ and, for the tools, Linux or macOS (Windows through WSL2).

git clone https://github.com/fzn0x/watchtower.git
cd watchtower

sudo ./install_tools.sh          # installs the security tools
python -m venv venv
source venv/bin/activate         # On Windows: venv\Scripts\activate
pip install -r requirements.txt

cp .env.example .env             # then set OPENAI_API_KEY, GEMINI_API_KEY, or OPENROUTER_API_KEY
python -m watchtower.main -t https://www.example.com

Export the latest run as a PDF with python -m watchtower.main --report pentest_report.pdf.

Documentation

The full documentation lives at fzn0x.github.io/watchtower:

• Getting started: installation, configuration, Docker
• Usage: interactive and headless runs, authenticated testing, flagship models and reasoning
• LLM providers: built-in and custom providers
• Tools: every integrated tool and the command Watchtower runs
• Reports: run history and PDF export
• Troubleshooting
• Development: adding tools and agents, CI, releases

Roadmap

• Initial LangGraph Planner/Worker architecture.
• Integrate core web and network reconnaissance tools.
• Add Pydantic structured-output fallback for open-source OpenRouter models.
• Parallel tool execution and smart truncation.
• Support for authenticated pentesting (cookies / headers).
• Flagship model support with reasoning-aware configuration.
• Continuous integration, verified Docker image, and a documentation site.
• Advanced business-logic analysis enhancements.

Contributing

Contributions are welcome! See CONTRIBUTING.md and the development guide.

Watchtower does not enforce target scope. You are responsible for testing only systems you own or are explicitly authorized to assess.

Security

Found a security issue? Please review our Security Policy for responsible disclosure instructions.

License

Licensed under the MIT License. See LICENSE for details.

By using this software, you agree to the conditions outlined in the Legal Disclaimer. Watchtower's developers assume no liability for misuse of this tool.

Legal Disclaimer

Watchtower is designed exclusively for authorized security testing and educational purposes.

• Legal use: authorized penetration testing, security research, educational environments.
• Illegal use: unauthorized access, malicious activity, any form of cyber attack.

You are fully responsible for ensuring you have explicit written permission before testing any system. Unauthorized access to computer systems is illegal under laws including the Computer Fraud and Abuse Act (CFAA), GDPR, and equivalent international legislation.

By using Watchtower, you agree to use it only on systems you own or are explicitly authorized to test.

Acknowledgements

Created and maintained by fzn0x.

A deep and sincere thank you to the open-source security community. Watchtower stands on the shoulders of giants. This framework would not exist without the developers who built and maintain the underlying penetration testing and reconnaissance tools that power its worker engine. Thank you for making security accessible.