Skip to content
@own2pwn-fr

own2pwn.fr

Entreprise AI-Native AppSec
README.md

We run hands-on web pentests, operate two SaaS platforms (EASM for external attack surface, SecAI for AI-native application security), and open-source the tooling we end up building along the way. Led by an OSWE-certified consultant; every product starts from a real engagement.

What we ship
Pentest Black-box and white-box web engagements, OSWE-led. OWASP / PTES methodology, prioritized report, free retest.
EASM Continuous discovery of your external attack surface (domains, IPs, certificates, APIs), with exploitability validated by AI.
SecAI AI-native AppSec: deterministic SAST with an LLM verifier and full taint chains, AI DAST, and an autonomous pentest agent.
Open source The tooling our engagements kept needing. Local-first, no telemetry, readable code.
Research SecLLM: distilling how humans actually find vulnerabilities into an agentic security model.

Open source

Built with

Rust Python TypeScript React Next.js Tauri PostgreSQL Docker

Need a pentest, or want to try EASM / SecAI? Get in touch. Offensive security, done in the open.

Pinned Loading

  1. burpwn burpwn Public

    Transparent intercepting proxy + sandbox + agent interface for AI-driven web pentesting (Burp, but for AI agents)

    Rust 13 1

Repositories

Showing 9 of 9 repositories
  • burpwn Public

    Transparent intercepting proxy + sandbox + agent interface for AI-driven web pentesting (Burp, but for AI agents)

    own2pwn-fr/burpwn's past year of commit activity
    Rust 13 AGPL-3.0 1 0 0 Updated Sep 30, 2026
  • ptaas-bench Public

    A benchmark for automated web pentest tools — PTaaS platforms, AI agents and classic DAST — scoring crawl reach, real fuzzing and verified exploitation across 170 planted vulnerabilities

    own2pwn-fr/ptaas-bench's past year of commit activity
    Python 2 Apache-2.0 0 0 0 Updated Sep 10, 2026
  • a2pwn Public

    Autonomous, evidence-grounded web-pentest orchestrator. A LangGraph master dispatches adversarially-verified sub-agents that drive all traffic through the burpwn sandbox — deep, cross-chain, 0-false-positive.

    own2pwn-fr/a2pwn's past year of commit activity
    Python 3 AGPL-3.0 0 0 0 Updated Aug 27, 2026
  • wp2shell-detect Public

    Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 / CVE-2026-60137). Detection only.

    own2pwn-fr/wp2shell-detect's past year of commit activity
    Python 4 MIT 0 0 0 Updated Jul 19, 2026
  • ctfhoard Public

    Aggregate all whitebox CTF challenge sources & writeups into one normalized, provenance- and license-tracked, deduplicated corpus.

    own2pwn-fr/ctfhoard's past year of commit activity
    Python 2 0 0 0 Updated Jul 19, 2026
  • .github Public
    own2pwn-fr/.github's past year of commit activity
    0 0 0 0 Updated Jun 14, 2026
  • pwn2report Public

    Open-source desktop app for writing security assessment reports (pentest, code audit, red team). Local-first, encrypted, Typst-rendered PDFs.

    own2pwn-fr/pwn2report's past year of commit activity
    Rust 2 AGPL-3.0 0 0 0 Updated Jun 13, 2026
  • oob-poc Public

    Minimal out-of-band (OOB) interaction server PoC — DNS + HTTP catch-all + live dashboard, from scratch in Rust. Authorized pentest use only.

    own2pwn-fr/oob-poc's past year of commit activity
    Rust 2 MIT 1 0 0 Updated Jun 12, 2026
  • secai-scan Public

    AI-native AppSec scanner for GitHub Actions. Run SecAI's deterministic SAST + LLM verifier on every PR, with SARIF output for Code Scanning.

    own2pwn-fr/secai-scan's past year of commit activity
    Shell 2 MIT 0 0 0 Updated May 23, 2026

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…