授权安全自动化工作台

SecBot

SecBot combines security testing tools, LLM reasoning, and local execution into auditable workflows for clearly authorized testing, research, and education.

NestJS APIInk TUIAgent 编排Tools / MCP

文档总览 Quick start View GitHub

仅用于已获得明确授权的安全测试、研究与教学。本站文档按 ecosystem / secbot / runtime 重排，runtime 指内部运行与执行链路，不是独立仓库。

文档入口

文档不再按历史发布分支展开，而是按阅读任务横向组织：先理解边界，再开始使用，最后深入执行链路。

认识

认识 SecBot

产品线、授权边界、发布方式和整体执行模型，先建立稳定的项目地图。

进入文档

使用

开始使用

安装、快速开始、终端界面、环境变量、LLM、API 与部署路径。

进入文档

执行

运行与执行

Agent 编排、工具清单、Skills/MCP、工具扩展、记忆系统和设计范式。

进入文档

本地运行

先把 SecBot 跑起来

release 分支是当前网站文档对应的主线。复制命令后可在本地启动完整栈，再进入快速开始查看配置与验证步骤。

git clone https://github.com/iammm0/secbot.git cd secbot git checkout release npm ci npm run start:stack

Ready to copy and run

Core capabilities

Planning and tool orchestration

Turn authorized targets, testing intent, and context into executable steps, then adjust tool calls from feedback.

Security tool matrix

Cover reconnaissance, protocol analysis, Web Research, defensive checks, and reporting without bouncing between scripts.

Streaming observability

Expose progress, intermediate results, and errors by stage so long-running tasks are easier to interrupt, review, and debug.

Model and environment fit

Connect cloud or local LLMs so teams can choose the right setup for network, cost, and privacy constraints.

Reproducible session memory

Keep configuration, context, and run records locally for auditing, retesting, and continuous tuning.

TUI + API entry points

Use the terminal for hands-on work and the HTTP API for pipelines, server-side tasks, and automation scripts.