Inside PentestAI

What is PentestAI?

PentestAI is an AI-powered security workspace built to help companies and individual users make penetration testing more practical, efficient, and actionable.

With more than 30 AI models and support for using nearly all modern tools, PentestAI holds a meaningful place in the industry for teams and practitioners who want to move faster without losing operational depth.

Which model should I use?

Recommended models are shown with their own special badge in the capabilities section. You are still free to use any model you want from the model library.

Do not forget to check the capabilities section if you want to learn more about the models.

These capabilities and models are updated regularly.

What do Ask and Agent do?

Ask mode gives you faster responses and is better for quick questions, follow-up prompts, clarifications, and lightweight guidance. If you mainly need direct answers or want to move quickly through a problem, Ask mode should usually be your first choice.

Agent mode can actively use pentesting tools, perform target-focused scans, and work through action-oriented tasks step by step. Use Ask for fast answers, and use Agent when you want the system to take action on a scoped target.

How does Swarm mode work?

Swarm brings multiple agents together on one authorized task. They can investigate different parts of the work in parallel, use the same terminal and browser tools as Agent mode, share what they learn, and return one combined result. Swarm is available on Pro, Plus, and Max plans.

Live Swarm starts the exact number of agents you choose. The agents divide the task, exchange updates in real time, adapt as the work develops, and bring their findings together in the final response. It is best for fast exploration, triage, and tasks that benefit from several perspectives.

Deep Swarm uses a coordinator to map the work, assign focused parallel investigations, and validate candidate findings with fresh tool evidence before producing the final report. Branches that report no finding are not re-tested, and an inconclusive validation does not trigger a duplicate worker round. The Maximum rounds setting caps how many pre-planned batches may run. It is best for complex assessments where evidence quality and confidence matter most.

Which should I choose? Choose Live Swarm when speed and flexible teamwork are the priority. Choose Deep Swarm when you want a more structured investigation with additional planning and verification. More agents and longer run limits can increase both run time and usage.

Open Settings > Swarm to choose the architecture, role models, and run limits. You can also enable Stealth Mode to reduce duplicate probes and request bursts; active requests may still be visible to the target.

How does the terminal & browser work?

Terminal actions run in an isolated workspace. The terminal card inside the chat gives you a quick summary, while the inspector panel on the right lets you review command output in more detail.

The assistant can also drive a browser inside the same isolated workspace. It uses this to load pages, run console scripts, and watch console and network activity during web testing — the kind of in-browser checks a plain command-line request cannot cover.

Resetting the terminal clears the saved terminal workspace and prior terminal state for your account. It does not delete your account, and it does not remove your normal chat history.

How are chats saved and organized?

Signed-in users get persistent chat history. You can rename conversations, pin important threads, reopen older work, and search across previous chats from the sidebar.

If you are not signed in, the interface can still show a limited guest experience, but those chats are not treated the same way as authenticated conversations.

Can I upload files and evidence?

Yes, depending on your plan and the active workflow. Uploads are useful for logs, screenshots, documents, and raw evidence that the model should review together with your prompt.

For best results, explain what the file is, what matters inside it, and what kind of answer you want back. Context quality matters more than file count. However, not every model may support images or file uploads.

What changes across plans?

Plans primarily affect model access, advanced workflow access, file upload availability, and the amount of supported usage.

On the Plus plan, you get 3 times more usage than the Pro plan, and on the Max plan, you can get up to 10 times more usage.

What about privacy and account control?

Your account settings let you manage sign-in methods, password access, email verification flow, and multi-factor authentication. If you delete your account, the deletion flow removes your account data, conversations, and related stored records tied to that account.

If you need to reset only the sandbox terminal, use the terminal reset action instead of deleting the full account.