A Penligent alternative you script
Penligent is a packaged AI penetration testing application; PentestLLM is a model API. It is the alternative when you want to keep your own tools and agent and only need a security-tuned model behind them, paid per token from a prepaid balance starting at $10.
curl https://api.pentestllm.ai/v1/chat/completions \
-H "Authorization: Bearer sk-ptl-live-…" \
-H "Content-Type: application/json" \
-d '{
"model": "auto/security",
"messages": [{"role": "user", "content": "Rank these scanner findings by severity and say what to verify first."}]
}'
What Penligent is, as of November 2026
Penligent’s site, read on 11 November 2026, describes an AI pentesting product available as a download for Windows, macOS and Linux. It says the product goes from a natural-language prompt to verified findings, coordinates more than 200 security tools and produces reports aligned with SOC 2 and ISO 27001.
Its pricing page on the same day listed a Free plan at $0 a month, a Pro plan at $99.90 a month with 13,000 monthly credits included, and Team and Enterprise plans through sales. The Enterprise plan lists private model integration through an inference gateway.
Product or component
- What you get
- Penligent: an application that runs the workflow. PentestLLM: a model endpoint you plug into a workflow you own.
- How you pay
- Penligent: plans and credits, per its pricing page. PentestLLM: per token, prepaid, no plan.
- Where it runs
- Penligent: its desktop app. PentestLLM: any OpenAI-compatible or Anthropic-compatible client.
- Who drives
- Penligent: its own agent, with the controls its app provides. PentestLLM: your agent, your approval rules.
These are different purchases. Many teams will want one and not the other.
Why testers choose the component
Experienced testers already have a method, a toolset and a report template. A packaged workflow asks them to adopt someone else’s. A model API asks for nothing: it sits behind OpenCode, Claude Code or a Python script and does the reading, the reasoning and the drafting.
The builds are tuned or abliterated to answer security questions other models decline, which is the property a general coding agent lacks. That is reduced refusals, not none.
What the API includes
The endpoint is https://api.pentestllm.ai/v1, with a Messages endpoint for Anthropic-format clients on the same key. auto/security picks a fast, balanced or frontier build per request and bills at that build’s price. Declared in a request, web search ($0.01 per search), page fetch ($0.001 per page fetched), a code sandbox ($0.05 per container-hour, 1-minute minimum) and remote MCP run on the API side. For tool execution on your own Kali machine, the Kali MCP guide shows the setup.
When Penligent is the better choice
If you want a guided product that orchestrates tools and writes a compliance-aligned report without you assembling anything, that is what Penligent’s site says it does, and an API will not give you that out of the box. If you are a small team without a house method, a packaged workflow can be the faster start.
Whichever you use, the rule is the same: test only systems you own or have written permission to test. PentestLLM’s acceptable use policy states it, and Penligent’s site carries a similar notice.
9 security builds, priced per token
Read from the live catalog on 2026-11-11. Prices are US dollars per million tokens, paid from a prepaid balance that starts at $10. The id auto/security has no price of its own: each request is billed at the build that answered.
| Build | Input | Output | Context |
|---|---|---|---|
| Qwen3.8 27B Cybersecurity | $0.40 | $2.40 | 262,144 |
| Gemma 4 26B A4B Cybersecurity | $0.4224 | $1.3376 | 262,144 |
| GLM-5.3 Flash Cybersecurity | $0.5093 | $1.6975 | 1,048,576 |
| Red Team (Flash) | $0.90 | $3.00 | not published |
| Red Team (Pro) | $1.50 | $6.00 | not published |
| OrcaCyber MiniMax M3.1 Flash | $2.00 | $4.00 | 261,632 |
| OrcaCyber Qwen3.8 Flash Next | $2.00 | $4.00 | 261,632 |
| Cyber Frontier | $5.25 | $15.75 | 1,048,576 |
| OrcaCyber Zero 1.5 | $7.50 | $18.75 | 999,488 |
Questions
Per its own site in November 2026, an AI penetration testing application for Windows, macOS and Linux that coordinates security tools and produces reports.
On 11 November 2026 its pricing page listed Free at $0 a month, Pro at $99.90 a month with 13,000 monthly credits, and Team and Enterprise through sales. Check penligent.ai for current prices.
No. It is a model API. It answers requests from your agent or script; the workflow, the tools and the approvals are yours.
Per token from a prepaid balance with a $10 minimum top-up and no plan. On 2026-11-11 input prices for security builds start at $0.40 per million tokens.
Yes, in the sense that a model drafts findings and summaries from your notes in your template. There is no built-in report product; you supply the structure and check the content.
Read next
- PentestGPT alternativeThe model endpoint to run PentestGPT on, or to use in place of a chat subscription.
- HackerGPT alternativePay-per-token security models with an API, next to the hosted assistants.
- Red teamModels for authorized adversary emulation: planning, tooling review, detection notes and reporting.
- Agent guidesWhere the base URL and key go in OpenCode, Claude Code, Cursor, Cline, aider, Kali MCP and PentestGPT.
Facts about other products and tools on this page were read from their own pages on 11 November 2026: penligent.ai, penligent.ai pricing. They change; check the source before relying on a figure.
One key, from $10
PentestLLM is for systems you own or have written permission to test. The acceptable use policy says what is not allowed.
- Input, 8,000 tokens at $0.40 per million
- $0.0032
- Output, 1,000 tokens at $2.40 per million
- $0.0024
- One turn
- $0.0056
- 1,000 turns
- $5.60