Kali-AI Auth v2: Automated Pentest Platform with Authenticated Scanning

This is a repackaged software product wherein additional charges apply for the Kali-AI v2 automated penetration testing platform. Kali-AI v2 is a self-hosted autonomous penetration testing platform built on hardened Ubuntu 24.04 LTS. It runs a 7-tool scanning pipeline, analyzes every finding with Anthropic Claude AI, and generates professional white-label PDF reports automatically - no manual steps between scan launch and final deliverable.

This edition adds Authenticated Scanning: supply a session cookie or custom header per scan, and Kali-AI automatically includes it on every request from Nuclei, Nikto, WhatWeb, Gobuster, WPScan, and SQLMap - surfacing findings on member areas and admin dashboards an unauthenticated scan alone would miss. Credentials are encrypted at rest, redacted from all logs and console output, and never returned by the API or shown in reports.

Designed for MSSPs, security teams, red teams, and penetration testers who need repeatable automated assessments without SaaS pricing or data residency risk. All data stays on your EC2 instance.

Kali-AI v2 executes Nmap, Nuclei, Nikto, WhatWeb, Gobuster, WPScan, and SQLMap in sequence. When an auth cookie or header is supplied, each applicable tool includes it on every request. Findings are correlated, enriched with CVE data, and analyzed by Claude AI to produce an executive summary, risk rating, attack path analysis, remediation plan, and NIST/PCI-DSS/ISO 27001 compliance observations - delivered as a white-label PDF.

• Authenticated Scanning: Supply a session cookie or custom header once; applied automatically across Nuclei, Nikto, WhatWeb, Gobuster, WPScan, and SQLMap. Encrypted at rest, never shown in logs or reports.
• 7-Tool Automated Pipeline: Runs with no manual orchestration required.
• Claude AI Analysis: Every finding is risk-rated with actionable narratives, not raw scanner output.
• White-Label PDF Reports: Your company name and logo, with email delivery on completion.
• Security Score Dashboard: Posture score (0-100, A-F), risk gauge, severity chart, activity timeline.
• Remediation Tracker: Assign findings, due dates, status, CSV export.
• Attack Path Visualization and Scan Delta comparison across assessments.
• Scheduled Scans: Cron-based, Full/Quick/Web/Network types.
• Batch Scanning: Up to 20 targets with parallel execution.
• Client and Project Tagging for MSSP workflows.
• Security Copilot: AI assistant for remediation queries.
• RBAC: Admin, analyst, auditor roles with JWT authentication.
• Integrations: Slack/Teams webhooks, SIEM JSON export, REST API.

Runs on hardened Ubuntu 24.04 LTS. The first-boot wizard ensures no default credentials exist. RBAC with JWT authentication controls access across roles. Authentication values are encrypted at rest and redacted from logs, console output, and reports. All scan data remains on your EC2 instance with no vendor data retention.

1. Launch an EC2 instance (t3.medium or larger, 30 GB EBS). Open port 80 in your Security Group.
2. Open a browser to and complete the setup wizard.
3. Create your admin account (12+ character password required).
4. Add your Anthropic API key in Settings (console.anthropic.com - pay-per-use).
5. Launch a scan. Try: scanme.nmap.org. Optionally expand "Authentication" for a session cookie.
6. View the AI-analyzed PDF report in Reports.

Request a sample anonymized PDF report from Madarson IT before deploying. Launch a t3.medium instance and scan scanme.nmap.org to try the full scan-to-report workflow with minimal commitment.

• An Anthropic API key is required for Claude AI analysis, billed separately by Anthropic on a pay-per-use basis.
• Authenticated Scanning supports session cookie / header-based authentication. Automated login is not currently supported.
• Buyers should verify compatibility with their target EC2 instance types before deploying at scale.
• For HTTPS, deploy behind an AWS ALB or CloudFront distribution with an ACM certificate.

AUTHORIZED USE ONLY. For security testing of systems you have explicit written permission to test, including with Authenticated Scanning. Unauthorized use violates the AWS Acceptable Use Policy, the Computer Fraud and Abuse Act (CFAA), and equivalent laws.

Madarson IT certified images are continuously updated, security-optimized, and built to meet enterprise requirements with minimal configuration. Madarson IT also offers hardened and custom images across AWS, GCP, and Azure Marketplace.