AI agents for bug bounty hunters and pentesters.
Recon, exploitation, and reporting agents for Claude Code, Codex, Cursor, and Gemini CLI. Sign in once, run sm install, and stay current with sm update.
No card required to sign up. Subscribe to a single pack, or get every pack with Pro.
A pack for every phase of the hunt
48 agents and skills across 8 packs, from first recon to the final report.
Free, forever
Try it before you buy anything
The Starter pack is free on any plan: a first recon pass, a guided web app check, help writing your first report, and a tour of the CLI itself. No card required.
Starter
Try the real workflow for free: a first recon pass, a guided web app check, and help writing your first report.
Cloud & Containers Basics
Free intro to cloud security: common AWS/Azure/GCP misconfigs, container escape basics, Kubernetes attack surface, and secrets scanning.
4 agents
- cloud-misconfig-starter
- container-basics
- k8s-attack-surface-starter
- secrets-scanner-starter
API & GraphQL Starter
Free intro to API security: REST auth and BOLA/IDOR basics, GraphQL-specific checks, and basic input validation testing.
All access
Every pack, included with Pro
Get all 8 packs (48 agents and skills, updated continuously) on one Pro plan, instead of subscribing pack by pack.
Web and API Hunting
15,00 €/moHunt web and API bugs: injection, access control, SSRF, GraphQL, JWT, and business logic.
Recon and OSINT
15,00 €/moScope a program: subdomains, assets, intel, and the first plan of attack.
9 agents
- recon-advisor
- osint-collector
- subdomain-takeover
- vuln-scanner
- threat-modeler
- engagement-planner
- +3 more
Exploitation and PoC
15,00 €/moTurn a finding into a proof: exploit chains, payloads, PoCs, privilege escalation, and credentials.
9 agents
- exploit-chainer
- exploit-guide
- payload-crafter
- poc-validator
- binary-exploit
- privesc-advisor
- +3 more
Hunting Methodology
15,00 €/moHow a hunter works: recon, scope, severity, testing, reporting, and disclosure.
6 agents
- recon-methodology
- scope-and-roe
- web-testing-checklist
- severity-scoring
- report-writing
- responsible-disclosure
Reports and Analysis
15,00 €/moTriage findings, analyze malware and traces, and write the bounty report.
Social Engineering
15,00 €/moPhishing, social engineering, adversary emulation, and LLM bug bounty.
Cloud Hunting
15,00 €/moHunt bugs in cloud, containers, CI/CD, and Active Directory.
Mobile and Hardware
15,00 €/moHunt bugs in mobile apps, wireless, hardware, and firmware.
Free for one machine. Pro for all of them.
Try the free agents on one device. Upgrade for unlimited machines, the full catalog, and (soon) publish and earn from your own agents. You can also buy a single pack, or add several to the cart.
Free
No card required
- 1 connected device (revoke to switch machines)
- Up to 15 Free agents, skills, and rules
- Claude Code, Codex, Cursor, and Gemini CLI
- Install, update, and remove from the CLI
Pro
Publish and earn, coming soonPrice shown at checkout
Billed annually
- Unlimited connected devices
- Every agent, skill, and rule, including Pro only ones
- Every pack: all bug bounty categories and skills
- Publish agents and earn from usage, coming soon
Team
Price shown at checkout
Billed annually
Min. 3 seats
- Everything in Pro, for every member
- A shared stack: sm install --team
- Private agents, skills, and rules for your team
- See and revoke every member's devices
- One invoice, seats follow your members
Compare plans
Side by side, Free and Pro: devices, catalog, and publishing.
| Compare plans | Free | Pro | Team |
|---|---|---|---|
| Usage | |||
| Connected devices | 1 | Unlimited | Unlimited |
| Install, update, list, and remove from the CLI | Included | Included | Included |
| Preview with --dry-run | Included | Included | Included |
| Catalog | |||
| Agents, skills, and rules | Up to 15 | Unlimited | Unlimited |
| Pro only agents, skills, and rules | Not included | Included | Included |
| Installable packs | Not included | Included | Included |
| Team | |||
| Shared team stack | Not included | Not included | Included |
| Private team agents | Not included | Not included | Included |
| Manage members' devices | Not included | Not included | Included |
| One invoice, per seat | Not included | Not included | Included |
| Publish | |||
| Publish agents to the catalog | Not included | Coming soon | Coming soon |
| Earn from agent usage | Not included | Coming soon | Coming soon |
| Publisher analytics | Not included | Coming soon | Coming soon |
| Tools | |||
| Claude Code and Cursor (own files) | Included | Included | Included |
| Codex and Gemini CLI (marked sections) | Included | Included | Included |
Write-ups and methodology
Bug bounty and pentest write-ups from the SkillManager team: how we find a bug, confirm it, and report it.
How I Found My First HackerOne Bounty: a Missing Auth Check Hiding in Plain Sight
A beginner-friendly bug bounty write-up: a broken object-level authorization (BOLA) bug on a real production API, and the question that finds this bug class every time.
Install your first agents today.
Create a free account, install the CLI, then run sm login and sm install in a project.
npm i -g @skillmanager/cli