Insomnia: an autonomous AI red team that runs a pentest from recon to report

November 9, 2026 2 min read

Insomnia (insom.ai) is an autonomous AI pentesting suite from CQR Cybersecurity. Its tagline is "Our Bots Don't Sleep", and that is the point: a seven-agent AI red team runs a full engagement around the clock, from recon to a client-ready report, across web apps, APIs, networks, cloud and Active Directory.

Insomnia dashboard and live scanning

What is inside

  • 275+ web attack modules (SQLi, XSS, CSRF, JWT, GraphQL, API)
    • 20+ protocol scanners matched against 30,000+ CVEs
      • OSINT canvas with 200+ transforms
        • Active Directory attack paths with BloodHound mapping
          • Proxy, fuzzing, out-of-band testing, cloud checks, C2
            • One-click PDF, DOCX and HTML reports with CVSS scoring

              • MCP server for driving assessments from an AI assistant

                • Free SAST CLI: pip install sast, npm i -g sastai, docker pull dominators/sast

                • Inside the app

              • Intercepting proxy and OSINT

            • Exploitation arsenal
          • Active Directory with BloodHound mapping
        • Cloud and infrastructure testing
      • Command and control
    • Reporting and knowledge base
  • Network utilities

Pricing

Community Edition is free, and so are the SAST CLI and the CI/CD wizard. Advanced is 149 dollars per month, Pro is 399 dollars per month, Enterprise is priced on request.

Website: https://insom.ai | Videos: https://insom.ai/en/videos | SAST on GitHub: https://github.com/vulnz/sast | X: https://x.com/insom_ai | LinkedIn: https://www.linkedin.com/company/insomnia-cqr