Kali-AI Auth v2: Automated Pentest Platform with Authenticated Scanning

Designed for MSSPs, security teams, red teams, and penetration testers who need repeatable automated assessments without SaaS pricing or data residency risk. All data stays on your EC2 instance.

## How It Works

Kali-AI v2 executes Nmap, Nuclei, Nikto, WhatWeb, Gobuster, WPScan, and SQLMap in sequence. When an auth cookie or header is supplied, each applicable tool includes it on every request. Findings are correlated, enriched with CVE data, and analyzed by Claude AI to produce an executive summary, risk rating, attack path analysis, remediation plan, and NIST/PCI-DSS/ISO 27001 compliance observations - delivered as a white-label PDF.

## Key Features

• **Authenticated Scanning:** Supply a session cookie or custom header once; applied automatically across Nuclei, Nikto, WhatWeb, Gobuster, WPScan, and SQLMap. Encrypted at rest, never shown in logs or reports.
• **7-Tool Automated Pipeline:** Runs with no manual orchestration required.
• **Claude AI Analysis:** Every finding is risk-rated with actionable narratives, not raw scanner output.
• **White-Label PDF Reports:** Your company name and logo, with email delivery on completion.
• **Security Score Dashboard:** Posture score (0-100, A-F), risk gauge, severity chart, activity timeline.
• **Remediation Tracker:** Assign findings, due dates, status, CSV export.
• **Attack Path Visualization** and **Scan Delta** comparison across assessments.
• **Scheduled Scans:** Cron-based, Full/Quick/Web/Network types.
• **Batch Scanning:** Up to 20 targets with parallel execution.
• **Client and Project Tagging** for MSSP workflows.
• **Security Copilot:** AI assistant for remediation queries.
• **RBAC:** Admin, analyst, auditor roles with JWT authentication.
• **Integrations:** Slack/Teams webhooks, SIEM JSON export, REST API.

## Security and Data Handling

Runs on hardened Ubuntu 24.04 LTS. The first-boot wizard ensures no default credentials exist. RBAC with JWT authentication controls access across roles. Authentication values are encrypted at rest and redacted from logs, console output, and reports. All scan data remains on your EC2 instance with no vendor data retention.

## Getting Started

• Launch an EC2 instance (t3.medium or larger, 30 GB EBS). Open port 80 in your Security Group.
• Open a browser to <ec2-ip> and complete the setup wizard.
• Create your admin account (12+ character password required).
• Add your Anthropic API key in Settings (console.anthropic.com - pay-per-use).
• Launch a scan. Try: scanme.nmap.org. Optionally expand "Authentication" for a session cookie.
• View the AI-analyzed PDF report in Reports.

## Evaluate Before You Commit

Request a sample anonymized PDF report from Madarson IT before deploying. Launch a t3.medium instance and scan scanme.nmap.org to try the full scan-to-report workflow with minimal commitment.

## Requirements and Limitations

• An Anthropic API key is required for Claude AI analysis, billed separately by Anthropic on a pay-per-use basis.
• Authenticated Scanning supports session cookie / header-based authentication. Automated login is not currently supported.
• Buyers should verify compatibility with their target EC2 instance types before deploying at scale.
• For HTTPS, deploy behind an AWS ALB or CloudFront distribution with an ACM certificate.

## Responsible Use

AUTHORIZED USE ONLY. For security testing of systems you have explicit written permission to test, including with Authenticated Scanning. Unauthorized use violates the AWS Acceptable Use Policy, the Computer Fraud and Abuse Act (CFAA), and equivalent laws.

## About Madarson IT

Madarson IT certified images are continuously updated, security-optimized, and built to meet enterprise requirements with minimal configuration. Madarson IT also offers hardened and custom images across AWS, GCP, and Azure Marketplace.