Nightcrawler is an open-source AI agent that runs locally on a smartphone and performs penetration testing. It automates security assessments by scanning networks, identifying vulnerabilities, and suggesting exploits, all without cloud connectivity. The project, released on GitHub under the garagehq organization, targets mobile-first security testing for developers and security researchers. Its local operation addresses privacy and latency concerns associated with cloud-based AI tools. The tool is currently in early development, with basic scanning and reporting features available.
Imagine a security researcher on a bus, auditing a client's network with just their phone. Nightcrawler makes that real. It's not about turning everyone into a hacker. It's about democratizing security. Right now, pentesting is expensive and exclusive. You need powerful hardware and deep expertise. Nightcrawler squeezes that into your pocket. That's not a threat. It's an equalizer.
Sure, there are risks. Bad actors could use it too. But the same was said about encryption, about the internet itself. We don't ban fire because it can burn. We teach people to use it safely. Nightcrawler is a step toward a world where security is proactive, not reactive. Where every developer can test their own app before a criminal does. That's the future I want to build. And it starts with a phone.