Raven is a complete AI-powered pentest framework — recon, findings, evidence, and reporting in one place. Download it, run unlimited engagements, and keep it forever. You only pay for AI, and only when you use it.
# Free to download, free to run docker load < raven-pro-amd64.tar.gz docker run -d --name raven --network host raven:pro-amd64 # Add AI credits when you want them (from $20) raven scan nmap acme-corp --profile thorough raven ai "analyze all findings and suggest next steps"
Hostnames, IPs, domains, and usernames are replaced with placeholders before anything reaches the AI, then restored in your results. Real passwords and hashes never leave your machine. Nothing is stored.
Everything you need to run an engagement, not just document one.
Tell the AI what to do and it runs the tools, analyzes results, and suggests next steps. Full autonomous recon or step-by-step, your choice.
Nmap, Nuclei, SQLMap, Subfinder, Gowitness, Feroxbuster, and more. All orchestrated from one UI with auto-parsed results.
Full-featured web dashboard and a standalone CLI. Use whichever fits your workflow. Both talk to the same server.
Deploy agents on your RTA for internal engagements. BloodHound integration, AD enumeration, offensive tools library.
Track vulnerabilities with evidence, screenshots, and severity. Export to PlexTrac, Dradis, or your reporting tool of choice.
Built-in library of LOLBAS, GTFOBins, LOOBins, WADComs, LOLDrivers, and HijackLibs. Search and reference without leaving the tool.
“I built this for me — to make my life as a pentester easier and keep my boss off my back. Then I sat back, looked at what it had become, and thought: every pentester should have this.”
Raven didn't start as a product. It started as my own engagement tooling: the scanners I run every week, the findings tracking I was doing by hand in spreadsheets, and an AI advisor that actually works with the engagement data instead of hallucinating over it. It was built to get the work done and the report out the door — not to be sold.
It got good enough that keeping it to myself started to feel selfish. So here it is: the same tool I use, packaged so you can too.
Every credit unlocks the full AI methodology (recon, analysis, chat, the works). No feature is locked behind a plan. Subscribe for the best per-credit rate, or buy credits a la carte.
Run unlimited engagements with 20+ integrated scanners, findings and evidence tracking, and import/export. No card, no trial clock. AI is optional and unlocked by credits, never by a plan.
Download freeA-la-carte credit packs, bought inside the app whenever you run low. Higher per-credit rate than a subscription, zero commitment.
Pick your platform — we'll show you what works.
I'm using:
Docker image with the full Kali toolchain bundled — works anywhere Docker runs. Free to download and run; AI features draw from your credit balance once you pair.
~2.9 GB Docker image
Standalone terminal client. Connect to any Raven server from your terminal — same REPL as the web UI, with AI chat. Free to download; AI features draw from your credit balance.
~20 MB
For Kali / Mac-with-Homebrew pentesters who already have nmap, nuclei, etc. installed natively. Skip the 3 GB Docker image — download just the server binary, run raven-server start, web UI is up. Then pair with chamberdoor for AI features.
~30-55 MB
1. Load the Docker image
docker load < raven-pro-amd64.tar.gz
2. Create the data folder
mkdir -p pentests auth
3. Run it
docker run -d --name raven --network host --restart unless-stopped \
--cap-add=NET_RAW --cap-add=NET_ADMIN \
-v $(pwd)/pentests:/home/raven/pentests \
-v $(pwd)/auth:/home/raven/.raven \
raven:pro-amd64
4. Open in your browser
open http://localhost:8080
5. Pair with your chamberdoor account to unlock AI (one-time)
docker exec -it raven raven auth login
Raven runs fully without this — scans, engagement data, the whole workflow. Pairing signs you in to your chamberdoor account so the AI features (chat, methodology, analysis, reports) can draw from your credit balance. The CLI prints a URL; open it, sign in, confirm the device.
Optional standalone client. Connect to your Raven server from any terminal.
1. Make it executable (macOS: remove quarantine first)
xattr -d com.apple.quarantine raven-cli-pro-darwin-arm64
chmod +x raven-cli-pro-darwin-arm64
sudo mv raven-cli-pro-darwin-arm64 /usr/local/bin/raven
2. Connect to your server
raven -s localhost:8080
3. Or connect to a remote server
raven -s your-server-ip:8080