Autonomous AI pentesting suite: a 7-agent AI red team runs recon, scanning, exploitation and reporting
Insomnia dashboard and live scanning
1 / 3Overview
What is Insomnia?
Our Bots Don't Sleep. Recon to report in one command.
What Insomnia does
Insomnia is an autonomous AI pentesting suite by CQR Cybersecurity. You point it at a target and scope, and a team of seven AI agents runs the engagement on its own: recon and OSINT, port and service discovery, web and API scanning, CVE validation, exploitation, privilege escalation and reporting. Each stage feeds the next, so a forgotten subdomain from recon becomes a scan target and a confirmed finding becomes an exploitation attempt with proof.
Coverage
- 275+ web attack modules: SQLi, XSS, CSRF, JWT, GraphQL and API testing
- 20+ protocol scanners matched against 30,000+ CVEs
- OSINT canvas with 200+ transforms
- Active Directory attack paths with BloodHound mapping
- Intercepting proxy, fuzzing, out-of-band testing, cloud checks and C2
- Report Studio: PDF, DOCX and HTML reports with CVSS scores and fixes
- MCP server, so an AI assistant can drive an assessment in plain language
Free tools
The Community Edition and the SAST CLI are free. Install the CLI with pip install sast, npm i -g sastai or docker pull dominators/sast. It also plugs into CI/CD, VS Code and JetBrains.
Demo
A 36-minute voiced walkthrough and short demos of every module are at https://insom.ai/en/videos
Limits
Insomnia is built for authorized testing only. Use it on systems you own or have written permission to test.
Platforms and languages
Insomnia Availability
Platforms
Languages
Capabilities
Insomnia Key Features
7-agent AI red team
Run a full pentest on its own: recon and OSINT, scanning, CVE validation, exploitation and privilege escalation across web apps, APIs, networks and cloud.
275+ web attack modules
Test for SQLi, XSS, CSRF, JWT and GraphQL issues, plus 20+ protocol scanners matched against 30,000+ CVEs.
Active Directory and OSINT
Map attack paths to domain admin with BloodHound and investigate targets on an OSINT canvas with 200+ transforms.
One-click reports and free SAST
Export client-ready PDF, DOCX or HTML reports with CVSS scores, and scan code for free with the SAST CLI (pip install sast).
Best for
Who uses Insomnia?
MSSPs and red teams
Run continuous, autonomous penetration tests across many clients and hand each one a CVSS-scored report without adding headcount.
Plans and access
Insomnia Pricing
Freemium
Free, paid from $149/month
Community Edition, SAST CLI and CI/CD wizard are free. Advanced is $149/month with full AI automation. Pro is $399/month. Enterprise pricing on request.
Common questions
Insomnia FAQs
Insomnia Alternatives
Agent RidgeAI security audits for e-commerce and web platformsReviews
See what the community thinks and share your experience.
—
Based on 0 ratings
Rating distribution
Community reviews
No reviews
No written reviews yet.
