vuckuola/OpenClaw2026_ZaiZai_ClawVAPT

ClawVAPT is a Telegram-first, multi-agent VAPT assistant for security operators, freelancers, and small teams to run authorized vulnerability triage from chat. It verifies web target ownership (HTTP/DNS proof), locks scan scope, enforces credit/scan limits and explicit approval, and handles QRIS payments for top-ups. The Red Team agent runs safe web (active/deep), Nmap, and public GitHub repo scans via scanner adapters; findings are normalized and secrets redacted. The Blue Team agent produces PDF/JSON/manual-review reports and remediation summaries. All actions are deterministic backend logic with SQLite persistence, audit logs, and safety gates (no scans without verification/credits, no destructive testing). Built in TypeScript/Node, deployable via PM2 or Docker; supports optional OpenClaw advisory bridge.

AI-related keywords found in this repo's description, topics, or README summary — grouped by category. Each badge links to the corresponding ranking detail page.