vaultcat
vaultcat is an open-source toolkit for full-lifecycle penetration testing of HashiCorp Vault. It supports reconnaissance, credential hijacking, privilege escalation, data exfiltration, pivoting, and persistence. The tool operates across CLI, AI-assisted chat, and MCP server modes, making it suitable for security professionals and red teamers conducting Vault security assessments.
Open SourceMITCLIAPISelf-hosted
2stars
5features
2026since
Overview
5 featuresIn the Developer Tools space, vaultcat takes a focused approach. It focuses on performing comprehensive penetration testing and red team operations against HashiCorp Vault instances. vaultcat is an open-source project aimed at security researchers. The project is open source (MIT). vaultcat is available on the command line and API, and it can be self-hosted.
Muhammed Kurtoglu builds and maintains vaultcat, and it first shipped in 2026. The project is developed in the open on GitHub with 82 commits in the last 90 days. Among its 5 catalogued features are Vault Reconnaissance, Privilege Escalation, and Credential Exfiltration. It exposes integrations via an MCP server and a public API.
Summary written by a language model from the project’s public pages.
- Vault Reconnaissance
- Privilege Escalation
- Credential Exfiltration
- AI Chat Mode
- MCP Server
Tags
vault-pentestingred-team-toolkitsecurity-auditingai-pentestingmcp-server
AI capabilities
Text
Inference: Hybrid
Built with & integrations
Framework
FastAPI
AI providers
anthropicopenailocal_oss
Connectors
MCPAPI
Runs on
CLIAPI-onlySelf-hosted
Trust & compliance
License
MIT
Verified signals
Indexing history
1What PulseGate has recorded for this listing
Frequently asked questions about vaultcat
- What does vaultcat do?
- Vaultcat focuses on performing comprehensive penetration testing and red team operations against HashiCorp Vault instances. It is catalogued under Developer Tools on PulseGate.
- Who should use vaultcat?
- vaultcat is an open-source project built for security researchers.
- Is vaultcat free?
- Yes — vaultcat is open source under the MIT license and free to use.
- What platforms does vaultcat run on?
- vaultcat runs on the command line and API. It can also be self-hosted.
- Is vaultcat still active?
- The GitHub repository shows 82 commits in the last 90 days.
- What projects are similar to vaultcat?
- Similar projects tracked by PulseGate include EfficiencyNext Data Connector, System Information Widgets, and CKB.EfficiencyNext Data ConnectorSystem Information WidgetsCKB
- Who develops vaultcat?
- vaultcat is developed by Muhammed Kurtoglu.
- When did vaultcat launch?
- vaultcat first shipped in 2026.
Also in Developer Tools
Same category — not a similarity match