RamiBot — AI Security Operations Platform

Local-first • Red/Blue Team • MCP-Powered • Docker-Integrated

Execute. Analyze. Harden.

Key Features

RamiBot connects AI reasoning with real cybersecurity tools through a structured operations pipeline.

AI & Reasoning

• 🧠 Multi-provider LLM support
  OpenAI, Anthropic, OpenRouter, LM Studio, and Ollama

• 🧠 Skill Pipeline
  Structured methodology: Recon → Exploit → Defense → Reporting

• 🔐 Evidence-Locked Reporting
  Prevents hallucinated CVEs, versions, or findings

Security Tool Integration

• 🧰 Real security tool execution via MCP
  Integrates pentesting tools inside controlled environments

• 🕵️ Rami-Kali MCP server
  45+ pentesting tools available to the LLM

Infrastructure

• 🐳 Docker-integrated terminal
  Run commands directly inside containerized environments

• 🛑 Tool Approval Gate
  Human approval before executing security tools

• 📄 One-click PDF report export
  Generate structured security reports instantly

RamiBot v3.8.0

A local-first AI chat interface for security operations. Supports multiple LLM providers, real-time streaming, MCP tool integration, a dynamic security skill system, Docker terminal access, Tor transparent proxy management, a persistent findings database, one-click PDF report export, a human-in-the-loop Tool Approval Gate that pauses execution before every MCP tool call, a global Evidence-Locked Reporting system that prevents the model from fabricating versions, CVEs, severity ratings, or security properties not explicitly present in tool output, a dedicated Burp Suite web assessment skill, a response language selector, Hermes tool chaining that detects and executes <tool_call> XML emitted by Llama/Hermes fine-tuned models, zsh shell with syntax highlighting and autosuggestions in the Docker terminal, proxychains4 proxy routing with ready-made Burp and Tor profiles, Service-Bound CVE Correlation that locks every CVE to its exact detected service via CPE data, a CVE Query Lock rule that prevents semantic drift when generating NVD lookup queries after service discovery, OAuth token support for OpenAI (ChatGPT Plus/Pro subscription via Codex CLI) and Anthropic (reserved, pending re-enablement), and one-command install and start scripts (install.sh / install.bat, start.sh / start.bat) that automate the full setup from a fresh system.

Demo

AI-Assisted Pentesting Pipeline (Claude 4.5 + Rami-Kali)

... View full README on GitHub