open-kritt Open-Sources Agent-Orchestrated Vulnerability Hunting on the Premise That Whole-Repo Scanning Fails

GitHub·medium signalXBlueskyLinkedInCopy link

Kritt-ai/open-kritt (created 2026-07-20, 1,592 stars, 283 forks, AGPL-3.0) opens with the anti-pattern it rejects: pointing a model at an entire repository and asking for vulnerabilities rarely works. Instead it decomposes research into small well-defined tasks, runs them across agents in parallel, and merges output into de-duplicated, ranked findings with configurable validation and enrichment, driven by a visual workflow builder and a self-hosted stack where prompts, workflows, and model providers stay under the operator's control. The project ships a companion research paper at kritt.ai/open-kritt-launch; the AGPL license is a deliberate constraint for anyone considering embedding it in a commercial scanner.