← All repositories

AI agents / Repository assessment

Queued for next scan window

NousResearch/hermes-agent

The agent that grows with you

Explore repository ↗Request an assessment →

Assessment status

Assessment queued for a later scan window.

Latest platform activity: Queued for next scan window. Findings and assessment coverage are currently unknown.

Latest automated activity

Queued for next scan window

Last checked: 2026-10-14T07:13:46.273Z

Requested commit 0e427d788d253630d38a3a51cd76849e73cd6925

What a published report will show

  • The exact commit assessed and the scan date
  • Findings by severity, with available evidence
  • Completed checks, exclusions, and assessment limits

Listing a repository does not establish that it is safe. Security results describe the code and scope assessed at a particular time.

Qualification

Check whether AI Swarm Pentest fits your environment.

Share the minimum context. We will review the scope and tell you the next commercial step.

Before submitting — verify you fit

0 / 280

No commitment. If you don't fit, we'll tell you.
SAMPLE HANDOVER · ILLUSTRATIVE

Sample evidence handover

A trimmed view of what your team receives at the end of an AI Swarm Pentest engagement. Real engagements include full technical evidence, executive narrative, and a remediation plan.

VALIDATED FINDING Evidence attached

Server-Side Request Forgery in webhooks/receiver

demo-project/sample-app · src/webhooks/receiver.py:42

SeverityHigh CVSS 3.18.6 Priority79 Confirmedvia replay

Untrusted caller-supplied URLs reach an internal egress without an allowlist. Replayed in a sandbox against a fresh authorized target — the same control was validated to fail twice.

REVIEWER-READY REMEDIATION Merge-ready PR

Validate the target URL against an allowlist of permitted hostnames. Reject private/internal IP ranges. Enforce HTTPS only.

plexicus/remediation/webhooks-ssrf 3 changed · 0 new files
42resp = requests.get(target_url)
42+if not is_allowed_host(target_url):
43+  raise WebhookRejected(target_url)
44+resp = requests.get(target_url, timeout=5)
Every engagement hands over:
  • Executive briefing
  • Validated findings list
  • Merge-ready PRs
  • Compliance mapping (NIS2 · DORA · CRA)
 Private Round For investors