T3MP3ST

T3MP3ST (a leetspeak rendering of "tempest") is an open-source, multi-agent offensive-security framework that repurposes general-purpose AI coding agents — Anthropic's Claude Code, OpenAI's Codex, and similar — as autonomous red-teaming operators for finding vulnerabilities in code. Rather than shipping its own model, it acts as an orchestration layer: it spins up and coordinates multiple agent instances, assigns them roles in a vuln-hunting loop (reconnaissance, exploitation, verification), and drives them toward discovering and confirming security bugs with minimal human babysitting.

It comes from elder-plinius (known as "Pliny"), one of the more visible names in the AI red-teaming and jailbreak scene, and the project follows that lineage — it's aimed squarely at security researchers, bug-bounty hunters, and offensive-security engineers who already live in the terminal and want to point capable coding agents at real targets. The July 2026 launch leaned on claimed benchmarks against recent 2026 CVEs and demonstrated wiring into existing agent CLIs, which is the pitch that made it trend: you bring an agent you already pay for, and T3MP3ST turns it into a semi-autonomous vuln scanner.

The important framing: this is a GitHub framework, not a hosted product. It's free under AGPL-3.0, but "free" only covers the orchestration code — you still pay whatever your underlying agent's API or subscription costs, and those costs scale with how many agents you fan out. It's also unambiguously dual-use tooling: legitimate for authorized pentests, bug bounties, and CTF/research work, and off-limits for hitting systems you don't own or have permission to test.