Tools
A Bug-Bounty Team With $1.5M in Payouts Open-Sources Its Internal Vulnerability-Hunting Orchestrator as open·kritt
Kritt-ai/open-kritt (created 2026-07-20, 456 stars, 93 forks, v1.2.0 on 2026-07-23) is an AGPL-3.0 self-hosted platform that rejects the point-a-model-at-the-repo approach: it breaks security research into small focused tasks, fans them across Codex or Claude Code agents in parallel, then de-duplicates and ranks the output under a consistent finding schema with custom severity rankers and post-script validation. The team behind it publishes verifiable credentials — over $1,500,000 in bug-bounty payouts under the researcher name Blockian on Immunefi and HackenProof. Bring-your-own-model via Codex login, OpenAI, Anthropic or OpenRouter.
Source
↳ Follow the thread