Apex Runs Autonomous Offensive Security Testing From the Terminal on the Claude Agent SDK

GitHub·low signalXBlueskyLinkedInCopy link

Apex (~300 stars) is a penetration-testing agent built directly on Anthropic's Claude Agent SDK, covering blackbox and whitebox testing, authentication bypass, source code analysis, and data exfiltration/pivoting scenarios, with extended thinking for complex vulnerability discovery. It runs headless for CI/CD integration, which is the notable part — continuous autonomous pentesting as a pipeline stage rather than a quarterly engagement. Small project and single-source, so treat capability claims as unverified, but it is a concrete instance of the security-agent category arriving the same week an unsupervised consumer agent found a real authorization flaw by accident.