Lyrie: Open-source autonomous pentesting agent

Source: Help Net Security

Author: Sinisa Markovic

URL: https://www.helpnetsecurity.com/2026/05/18/lyrie-ai-autonomous-pentesting-agent/

Lyrie: Open-source autonomous pentesting agent

ONE SENTENCE SUMMARY:

Lyrie is an open-source autonomous pentesting agent and ATP identity protocol, accelerating security workflows with encryption, scanners, and PoC generation.

MAIN POINTS:

  1. Manual pentesting weeks-long effort is compressed into a single CLI-driven autonomous workflow.
  2. Lyrie 3.1.0 adds XChaCha20-Poly1305 memory encryption for sensitive threat data.
  3. Seven new PoC generators cover prompt injection, auth bypass, CSRF, open redirect, races.
  4. Additional PoCs address secret exposure and cross-site execution attack scenarios.
  5. Three deep scanners introduced: Rust analysis, taint engine processing, AI code review.
  6. Repository now includes 25 tested commands across security ops, binary analysis, governance.
  7. Packaging splits into lyrie-omega Python CLI and @lyrie/atp TypeScript Node SDK.
  8. Installation supports one-line script or separate pip and npm methods.
  9. lyrie hack runs phases from recon through exploitation, PoC generation, and reporting.
  10. Agent Trust Protocol uses Ed25519, delegation, revocation, multisig, with IETF submission planned.

TAKEAWAYS:

  1. Autonomous agents can meaningfully reduce pentest time and required specialized staffing.
  2. Memory encryption and tested command coverage improve operational safety and reliability.
  3. Built-in PoC generation broadens validation for web and LLM-specific vulnerabilities.
  4. SARIF output enables straightforward integration with GitHub Code Scanning pipelines.
  5. ATP provides a practical standard for agent identity, authorization scope, and tamper detection.