Privacy

Scope of this page

This page describes the current public website and open-source software. The website does not provide hosted accounts, accept payment or collect engagement uploads. It does not describe a currently available managed service.

Visiting the website

Cloudflare delivers and protects the website. Requests necessarily include network information such as an IP address, the requested URL and browser headers. Cloudflare handles traffic and security information under its privacy policy.

The homepage loads some graphics libraries from jsDelivr. Those requests expose ordinary request metadata to that provider. Documentation fonts and styles are served from this website. Followed links to GitHub, PyPI or other sites are governed by those sites' policies.

The homepage stores an animation preference in your browser. See cookies and local storage for details.

Running Pentest-AI

The CLI stores findings locally. Local storage does not mean every operation stays on the device: the tool sends requests to targets, and selected model providers and optional scanners have their own network behavior.

• Cloud model providers receive information included in requests to their APIs.
• Ollama can run the model locally, depending on your endpoint configuration.
• Blind-vulnerability checks can use an external callback service. That service can observe callback metadata. Use your own approved collaborator or disable callbacks where required.
• Anonymous CLI usage counters are opt-in through ptai telemetry enable. Use ptai telemetry disable to turn them off.
• If you previously configured hosted synchronization, use --no-sync for local CLI engagements. The old hosted service is not available through this site.

Review the settings and source for the version you run. Handle credentials, target data, reports and proof capsules according to your organization's policy.

Contact and public contributions

If you email the maintainer, the address and content you send are used to handle the request. Do not include secrets or unnecessary target data. Public GitHub issues and discussions are visible to others; use the private security channel for vulnerabilities.

Questions or information requests

Email [email protected] to ask about personal information you have shared with the project or request access, correction or deletion. Include enough context to identify the communication, without sending additional sensitive information. Requests are handled subject to applicable law and any information that must be retained.