heretic-agent
heretic-agent is an open-source autonomous security agent for identifying business-logic vulnerabilities such as BOLA/IDOR, price tampering, workflow bypasses, and data exposure. It is intended for application security teams, penetration testers, and bug bounty researchers.
Overview
7 featuresIn the Penetration testing & red teaming space, heretic-agent takes a focused approach. It focuses on finding business-logic vulnerabilities in applications without manually testing every workflow and authorization path. It is built as an open-source project for application security professionals and penetration testers. The project is open source (Apache-2.0). It ships for the command line, and it can be self-hosted.
Behind heretic-agent is SYCO7, and it first shipped in 2026. The project is developed in the open on GitHub with 29 commits in the last 90 days. Among its 7 catalogued features are business-logic scanning, BOLA/IDOR detection, and price tampering detection.
Summary written by a language model from the project’s public pages.
- Business-logic scanning
- BOLA/IDOR detection
- Price tampering detection
- Workflow bypass detection
- Data exposure detection
- Oracle verification
- False-positive reduction
Built with & integrations
Trust & compliance
Indexing history
1What PulseGate has recorded for this listing
Frequently asked questions about heretic-agent
- What does heretic-agent do?
- Heretic-agent focuses on finding business-logic vulnerabilities in applications without manually testing every workflow and authorization path. It is catalogued under Penetration testing & red teaming on PulseGate.
- Who is heretic-agent for?
- heretic-agent is an open-source project built for application security professionals and penetration testers.
- Is heretic-agent free?
- Yes — heretic-agent is open source under the Apache-2.0 license and free to use.
- What platforms does heretic-agent run on?
- heretic-agent runs on the command line. It can also be self-hosted.
- Is heretic-agent still maintained?
- The GitHub repository shows 29 commits in the last 90 days.
- What are alternatives to heretic-agent?
- Similar projects tracked by PulseGate include Frida Script Runner, apihunter-bess1lie, and HackTools.Frida Script Runnerapihunter-bess1lieHackTools
- Who develops heretic-agent?
- heretic-agent is developed by SYCO7.
- When did heretic-agent launch?
- heretic-agent first shipped in 2026.
Also in Penetration testing & red teaming
Same category — not a similarity match