Hack the Gap,
Learn the Skills

HackerGPT is an AI agent that pentests your own website, shows you what is exposed, explains how to fix it, and teaches you hacking while it does the work.

What HackerGPT Does

How It Works

  1. 1

    Point it at your site

    Give HackerGPT the URL of a site you own or have written permission to test.

  2. 2

    See the map

    AppMap shows the pages, logins and API endpoints it found.

  3. 3

    Get findings and fixes, and learn why

    Each finding comes with how to fix it and an explanation of how the attack works.

Test only sites you own or have written permission to test. To practice without one, use CyberGym.

Documentation

  • HackerGPT Docs

    Quick start guide and documentation for HackerGPT

  • CyberGym

    Deliberately vulnerable apps set up for everyone to practice offensive security. Full permission is granted to perform hacking/intrusion/compromise of applications in scope.

  • Blog

    Articles on offensive security, methodology and how HackerGPT works

Latest Insights

  • IDOR vulnerability example: find it and fix it

    What an IDOR is, shown on the real basket handler of CyberGym, a deliberately vulnerable training app, then reproduced and fixed in a small local Express app with two users.

  • CTF for beginners: start with web challenges

    What a CTF is, the main challenge categories, a small starter toolset, and a worked web challenge on CyberGym — plus how an AI can coach you through one without handing over the flag.

Our Team

  • Luca Distefano

    Security Researcher

  • David S. Harris, Esq.

    Chief Legal Officer

  • Shreeram Gudemaranahalli Subramanya

    Business Development and Outreach

  • Oleg Spiridonov

    Product Manager

Contact Us

Have questions or need assistance? We're here to help!

support@hackergpt.app