Insomnia: an autonomous AI red team that runs a pentest from recon to report

November 9, 20262 min read
Export HTMLExport PDF

Insomnia (insom.ai) is an autonomous AI pentesting suite from CQR Cybersecurity. Its tagline is "Our Bots Don't Sleep", and that is the point: a seven-agent AI red team runs a full engagement around the clock, from recon to a client-ready report, across web apps, APIs, networks, cloud and Active Directory.

Insomnia dashboard and live scanning

What is inside

  • 275+ web attack modules (SQLi, XSS, CSRF, JWT, GraphQL, API)
    • 20+ protocol scanners matched against 30,000+ CVEs
      • OSINT canvas with 200+ transforms
        • Active Directory attack paths with BloodHound mapping
          • Proxy, fuzzing, out-of-band testing, cloud checks, C2
            • One-click PDF, DOCX and HTML reports with CVSS scoring

              • MCP server for driving assessments from an AI assistant

                • Free SAST CLI: pip install sast, npm i -g sastai, docker pull dominators/sast

                • Inside the app

              • Intercepting proxy and OSINT

            • Exploitation arsenal
          • Active Directory with BloodHound mapping
        • Cloud and infrastructure testing
      • Command and control
    • Reporting and knowledge base
  • Network utilities

Pricing

Community Edition is free, and so are the SAST CLI and the CI/CD wizard. Advanced is 149 dollars per month, Pro is 399 dollars per month, Enterprise is priced on request.

Website: https://insom.ai | Videos: https://insom.ai/en/videos | SAST on GitHub: https://github.com/vulnz/sast | X: https://x.com/insom_ai | LinkedIn: https://www.linkedin.com/company/insomnia-cqr