METATRON social preview
other3,037MIT

METATRON

AI-powered penetration testing assistant using local LLM on linux (Parrot OS)

Updated Jun 8, 2026
Platforms
linux, web
Pricing
free-open-source
Status
active
License
MIT

Deep dive

The full breakdown - performance, comparisons, and setup

METATRON

METATRON is a local-AI tool - AI-powered penetration testing assistant using local LLM on linux (Parrot OS).

Overview

Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine — no cloud, no API keys, no subscriptions.

You give it a target IP or domain. It runs real recon tools (nmap, whois, whatweb, curl, dig, nikto), feeds all results to a locally running AI model, and the AI analyzes the target, identifies vulnerabilities, suggests exploits, and recommends fixes. Everything gets saved to a MariaDB database with full scan history.

Metatron allows you to export scan results into clean, shareable report formats by selecting '2.view history'->select slno and export

This creates your local 'metatron-qwen' model with: - 16,384 token context window - Temperature: 0.7 - Top-k: 10 - Top-p: 0.9

Wait until you see the '>>>' prompt. This means the model is loaded into memory and ready. You can leave this terminal running in the background.

4. Metatron runs the tools, feeds results to the AI, and prints the analysis.

This tool is intended for educational purposes and authorized penetration testing only.

  • Only use Metatron on systems you own or have explicit written permission to test. - Unauthorized scanning or exploitation of systems is illegal. - The author is not responsible for any misuse of this tool.

This project is licensed under the MIT License — see the LICENSE file for details.

METATRON is open-source, written primarily in Python, with 3,038 GitHub stars under the MIT license. It was last updated on 2026-04-11.

Key capabilities

From the project's documentation:

  • 🤖 Local AI Analysis — powered by metatron-qwen via Ollama, runs 100% offline
  • 🔍 Automated Recon — nmap, whois, whatweb, curl headers, dig DNS, nikto
  • 🌐 Web Search — DuckDuckGo search + CVE lookup (no API key needed)
  • 🗄️ MariaDB Backend — full scan history with 5 linked tables
  • ✏️ Edit / Delete — modify any saved result directly from the CLI
  • 🔁 Agentic Loop — AI can request more tool runs mid-analysis

Install

A quick way to get started (always check the official docs for the latest):

pip install -r requirements.txt

How it fits a local-AI stack

METATRON runs on your own hardware, so pair it with a model and a GPU sized to your needs. Use the VRAM calculator to pick a model that fits your card, and see what you can run for hardware guidance. Related local-AI tools in the directory:

Sources

Stats from GitHub, 2026-06-08.

Frequently asked

Quick answers to common questions

What is METATRON?

METATRON is a other tool for local AI workloads. AI-powered penetration testing assistant using local LLM on linux (Parrot OS)

Is METATRON free and open source?

Yes, METATRON has 3,037 GitHub stars and is licensed under MIT. You can self-host it for free on linux, web.

What platforms does METATRON support?

METATRON runs on linux, web.

What hardware do I need for METATRON?

The hardware requirements depend on which models you run. Check our hardware directory for compatible GPUs and systems. METATRON has 3,037 GitHub stars and an active community.

Does METATRON support GPU acceleration?

METATRON supports GPU acceleration via CUDA, Metal, or Vulkan depending on your platform. For the best performance, pair it with an NVIDIA RTX 4090 or 5090.

What are the best alternatives to METATRON?

Popular alternatives include other other tools in our directory. Browse our full collection at /tool for comparisons, community reviews, and benchmark data to find the right fit for your workflow.

How much does METATRON cost?

METATRON is free-open-source. It is completely free and open source to self-host.

Pairs well with

Complementary tools, models, and hardware

Similar tools

More tools like this one

Comments coming soon

Configure NEXT_PUBLIC_GISCUS_REPO_ID and NEXT_PUBLIC_GISCUS_CATEGORY_ID at giscus.app to enable.