open-kritt

(★ 1,954)

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

File Explorer

Download Latest Version (.zip)

- - bug_report.yml
  - config.yml
  - feature_request.yml
- - ci.yml
  - release.yml
- CODEOWNERS
- dependabot.yml
- PULL_REQUEST_TEMPLATE.md
- workflow_screen.png
- - migrate.js
  - schema.prisma
  - seed.js
- - app.js
  - db.js
  - server.js
- - accountLogins.test.js
  - accounts.test.js
  - agentSkillSeed.test.js
  - claudeCredentials.test.js
  - cors.test.js
  - dataIntegrity.test.js
  - defaultPostScripts.test.js
  - defaultSeverityRankers.test.js
  - defaultWorkflows.test.js
  - environmentFile.test.js
  - findingExport.test.js
  - generations.test.js
  - localRepos.test.js
  - migrationSafety.test.js
  - modelCatalog.test.js
  - modelProviders.test.js
  - providerCredentials.test.js
  - runtimeSettings.test.js
  - scanPagination.test.js
  - scanPresentation.test.js
  - seedSafety.test.js
  - templateRefs.test.js
  - validation.test.js
- .dockerignore
- .env.example
- Dockerfile
- eslint.config.js
- package-lock.json
- package.json
- - .gitkeep
  - 001_create_workflow_tables.sql
  - 002_additive_columns.sql
  - 003_add_scan_extras.sql
  - 003_extra_field.sql
  - 004_thinking_effort.sql
  - 005_remove_step_stub_columns.sql
  - 005_repo_kind.sql
  - 006_add_stub_explanation.sql
  - 006_consume_all_previous.sql
  - 007_make_scan_config_legacy.sql
  - 008_post_processing.sql
  - 009_seed_post_scripts.sql
  - 010_mirror_post_processing_to_step_metadata.sql
  - 011_metadata_phase.sql
  - 012_codex_account_attribution.sql
  - 013_agent_skills.sql
  - 014_seed_agent_skills.sql
  - 015_model_provider_metadata.sql
  - 016_scan_model_provider.sql
  - 016_severity_rankers.sql
  - 017_model_catalogs.sql
  - 018_generations.sql
  - 019_remove_post_script_finding_metadata.sql
  - 019_restore_legacy_compat_columns.sql
  - 020_expand_thinking_efforts.sql
  - 021_refresh_default_triage_artifacts.sql
  - 022_scan_management.sql
  - 023_scan_activity_sort.sql
  - 024_seed_security_post_scripts.sql
  - 025_scan_model_overrides.sql
  - 026_refresh_patched_since_main.sql
  - 027_describe_report_creator_inputs.sql
  - 028_bound_step_routing.sql
  - 029_workflow_context_files.sql
  - 030_step_3_candidate_dedupe.sql
  - 031_supplemental_post_script_runs.sql
  - 032_supplemental_post_script_retry_lineage.sql
- .dockerignore
- Dockerfile
- - kritt-logo-black.png
  - kritt-logo-purple-linkedin.png
  - kritt-logo-purple-on-white.png
  - kritt-logo-white.png
- - logo-dark.png
  - logo-light.png
- threat-model.md
- - claude-code.mdx
  - codex.mdx
  - openrouter.mdx
  - overview.mdx
- - post-script.mdx
  - ranker.mdx
  - run-the-scan.mdx
  - workflow.mdx
- - headless-cli.mdx
  - installation-and-setup.mdx
  - self-hosted-vs-managed.mdx
  - settings.mdx
  - welcome.mdx
- - agent-skills.png
  - cli-setup.png
  - cli.png
  - create-scan.png
  - overview.png
  - post-scripts.png
  - severity-ranker.png
  - workflow-builder.png
- - mark-accent.png
- - chips.mdx
  - difference-from-workflow.mdx
  - recommended-usage.mdx
  - reserved-post-scripts.mdx
- - errors-and-re-runs.mdx
  - how-to-view.mdx
  - vulnerability-view.mdx
- - configuration.mdx
  - create.mdx
  - dependencies.mdx
  - local-vs-remote.mdx
  - model-and-harness.mdx
  - post-scripts.mdx
  - rankers.mdx
  - reserved-extra.mdx
  - skills.mdx
- - how-to-create.mdx
  - why.mdx
- - add-and-use.mdx
- - batches.mdx
  - built-in-variables.mdx
  - built-in-workflows.mdx
  - depth-and-siblings.mdx
  - extra-variable.mdx
  - import-and-export.mdx
  - prompt-editor.mdx
  - prompt-variables.mdx
  - steps.mdx
- check-links.mjs
- docs.json
- favicon.svg
- package.json
- README.md
- style.css
- - __init__.py
  - __main__.py
  - artifact_cleanup.py
  - claude_auth.py
  - codex_auth.py
  - codex_updater.py
  - config.py
  - db.py
  - generation.py
  - harnesses.py
  - memory_budget.py
  - model_catalog.py
  - model_output_artifacts.py
  - models.py
  - post_processing.py
  - prompting.py
  - provider_credentials.py
  - queue.py
  - repository.py
  - runtime_config.py
  - schema.py
  - storage_cleanup.py
  - worker.py
  - workspace.py
  - workspace_snapshots.py
- - .gitkeep
- - test_artifact_cleanup.py
  - test_claude_auth.py
  - test_codex_updater.py
  - test_engine.py
  - test_generation.py
  - test_local_repositories.py
  - test_memory_budget.py
  - test_model_catalog.py
  - test_patched_since.py
  - test_post_processing_concurrency.py
  - test_provider_credentials.py
  - test_runtime_repository_regressions.py
  - test_security_hardening.py
  - test_storage_cleanup.py
  - test_supplemental_post_scripts.py
  - test_worker_backoff.py
  - test_workspace_snapshots.py
- .dockerignore
- Dockerfile
- Dockerfile.claude-runner
- pyproject.toml
- requirements.txt
- Dockerfile
- server.py
- test_server.py
- - apple-touch-icon.png
  - favicon-16.png
  - favicon-32.png
  - favicon.ico
  - favicon.svg
  - logo-mask.png
- - index.css
  - main.jsx
  - router.jsx
- .dockerignore
- .env.example
- .prettierignore
- Dockerfile
- eslint.config.js
- index.html
- package-lock.json
- package.json
- vite.config.js
- .gitkeep
- create-workflow-tables.sh
- kritt-headless-lib.mjs
- kritt-headless-ui.mjs
- kritt-headless.mjs
- kritt-headless.test.mjs
- kritt-lib.mjs
- kritt-ui.mjs
- kritt-ui.test.mjs
- kritt.mjs
- kritt.test.mjs
- logs-pretty.sh
- sync-version.mjs
.editorconfig
.env.example
.gitignore
.pre-commit-config.yaml
.prettierignore
.prettierrc.json
.release-please-manifest.json
AGENTS.md
CHANGELOG.md
CODE_OF_CONDUCT.md
CONTRIBUTING.md
CONTRIBUTION_TERMS.md
docker-compose.dev.yml
docker-compose.yml
kritt
kritt-headless
LICENSE
MAINTAINERS.md
OWNERSHIP.md
README.md
release-please-config.json
RELEASE.md
SECURITY.md
VERSION

# Installation Guide

1. Get the code

git clone https://github.com/Kritt-ai/open-kritt

Downloads the entire project code from GitHub to your computer.

cd open-kritt

Moves into the project folder you just downloaded.

2. Official Install Script

Easy Recommended

Prerequisites

Node.js Node.js must be installed to use npm.

npm install -g mint

Installs the package published on the npm registry globally — no need to clone the source.

✅ After installing, open a new terminal and run the program's version command (e.g. --version) to confirm it worked.

Pulled directly from this repo's README.

3. Docker

Easy

Prerequisites

Git Needed to download the project code from GitHub.
Docker Desktop Needed to build and run containers. Install it and keep it running in the background.

docker compose -f docker-compose.dev.yml up -d --build

Runs the command against the services defined in the compose file.

✅ Run docker compose ps to check the containers are Up. If the README mentions a port, open http://localhost:PORT in your browser.

4. Node.js

Easy

Prerequisites

Git Needed to download the project code from GitHub.
Node.js Node.js must be installed to use npm. The LTS version is recommended.

npm install -g mint

Installs the package published on the npm registry globally — no need to clone the source.

npm run dev

Starts the development/run server.

✅ After running the command, open the address shown in the terminal (usually something like http://localhost:3000) in your browser.

Pulled directly from this repo's README.

5. Python

Easy

Prerequisites

Git Needed to download the project code from GitHub.
Python 3 On Windows, be sure to check 'Add Python to PATH' during installation.

pip install -r engine/requirements.txt

Installs the Python libraries listed in requirements.txt (or similar).

python <실행할 파일명>.py # README에서 정확한 실행 파일명을 확인하세요

Runs the Python script (or module).

✅ If it runs without errors and prints output in the terminal, it worked.

open-kritt

File Explorer

# Installation Guide

2. Official Install Script

3. Docker

4. Node.js

5. Python

Today's picks

Was this content helpful?

Recent Feedback

open-kritt

File Explorer

# Installation Guide

2. Official Install Script

3. Docker

4. Node.js

5. Python

Today's picks

Was this content helpful?

Recent Feedback

Download README