Kali-AI v2 - Autonomous Pentest Platform on Hardened Ubuntu 24.04 LTS

This is a repackaged software product from Madarson IT with additional charges applied for seller support. Kali-AI v2 is a self-hosted autonomous penetration testing platform built on Hardened Ubuntu 24.04 LTS. It runs a 7-tool scanning pipeline, analyses every finding with Anthropic Claude AI, and generates professional 10-section PDF security reports automatically -- no manual steps between scan launch and final deliverable.

Designed for MSSPs, security teams, red teams, and penetration testers who need repeatable automated assessments without SaaS pricing or data residency risk. All data stays on your EC2 instance.

WHAT IT DOES

Kali-AI v2 runs on a security-hardened Ubuntu 24.04 base with Kali Linux security tools installed. It automatically runs Nmap, Nuclei, Nikto, WhatWeb, Gobuster, WPScan, and SQLMap in sequence. Findings are correlated, enriched with CVE data, and analysed by Claude AI to produce an executive summary, risk rating, attack path analysis, remediation plan, and NIST/PCI-DSS/ISO 27001 compliance observations -- delivered as a 10-section PDF.

FEATURES

7-Tool Pipeline: Nmap, Nuclei, Nikto, WhatWeb, Gobuster, WPScan, SQLMap run automatically in sequence. Claude AI Analysis: Every finding risk-rated and written up by Anthropic Claude automatically. 10-Section PDF Reports: Professional reports ready to deliver. White-label with your company name and logo. Email Delivery: PDF reports and scan alerts sent via SMTP on completion. Security Score Dashboard: Posture score (0-100, A-F), risk gauge, severity chart, 7-day timeline. Remediation Tracker: Assign findings, set due dates, track status, export to CSV. Attack Path Visualization: Interactive graph showing chained vulnerability sequences. Scan Delta: New vs resolved vs persistent findings across assessments. Scheduled Scans: Cron-based recurring scans. Full, Quick, Web, or Network types. Batch Scanning: Up to 20 targets with parallel execution. Client and Project Tagging: For MSSP workflow and report organization. Security Copilot: AI assistant for plain-language queries about results and remediation. RBAC: Admin, analyst, and auditor roles with JWT authentication. Integrations: Slack and Teams webhooks, SIEM JSON export, full REST API. First-Boot Setup Wizard: No default credentials. Admin created by operator on first access.

WHO IS THIS FOR?

MSSPs: White-label automated reports to multiple clients. No per-scan fees. Enterprise Teams: Continuous assessments on a recurring schedule. Penetration Testers: Accelerate recon and reporting. Focus on analysis, not tooling. Red Teams: AI-assisted attack path mapping and chained exploitation analysis. Compliance Programs: NIST, PCI-DSS, ISO 27001 gap observations on schedule. DevSecOps: Integrate scanning into CI/CD via REST API.

QUICK START

1. Launch EC2 instance (t3.medium+, 30GB EBS). Open port 80 in Security Group.
2. Browse to http://your-ec2-ip/  and complete the setup wizard.
3. Create admin account (12+ character password).
4. Add Anthropic API key in Settings (console.anthropic.com -- pay-per-use).
5. Launch a scan. Try: scanme.nmap.org
6. View AI-analyzed PDF report in Reports section.

CONFIGURATION

Edit /opt/kali-ai/.env then run: sudo systemctl restart kali-ai

ANTHROPIC_API_KEY -- Required. Claude AI analysis. APP_SECRET_KEY -- JWT signing secret. SMTP_HOST / SMTP_USER / SMTP_PASSWORD -- Email delivery. DISPLAY_TIMEZONE -- Report timestamps (e.g. America/New_York). REPORT_COMPANY_NAME / REPORT_COMPANY_LOGO -- White-label PDF branding. SLACK_WEBHOOK_URL / TEAMS_WEBHOOK_URL -- Webhook notifications.

SSH as kali user with EC2 key pair. For HTTPS use ALB or CloudFront with ACM certificate.

RESPONSIBLE USE AND DISCLAIMER:

AUTHORIZED USE ONLY. For security testing of systems you have explicit written permission to test. Unauthorized use violates the AWS Acceptable Use Policy, the Computer Fraud and Abuse Act (CFAA), and equivalent laws. By deploying this product you agree to: (1) only test systems you are authorized to test; (2) comply with all applicable laws; (3) comply with the AWS Acceptable Use Policy; (4) Madarson IT LLC bears no liability for misuse, unauthorized access, or damages of any kind.

Ubuntu is a registered trademark of Canonical Ltd. Claude is a third-party AI service billed directly to your Anthropic account and subject to Anthropic's Terms of Service. All open-source security tools included (Nmap, Nuclei, Nikto, WhatWeb, Gobuster, WPScan, SQLMap) are provided under their respective open-source licenses. Madarson IT does not relicense these tools.

Support: info@madarsonit.com