h4ckbot Docs
Everything you need to use, configure, and self-host h4ckbot — the AI assistant purpose-built for professional penetration testers.
Quick Start
Create an account, set your spend cap, and run your first AI-assisted recon in under 5 minutes.
Authentication
Email + password auth with httpOnly JWT cookies, CSRF protection, and session versioning.
Self-Hosting
Run h4ckbot on your own infrastructure with Docker Compose.
Model Overview
How the h4ckbot intelligence layer was built, what it knows, and where its knowledge comes from.
Guardrails
The layered technical and policy controls that prevent misuse at the model, platform, and API levels.
Access Verification
Why we verify professional context, what is checked, and how your privacy is protected throughout.
What is h4ckbot?
h4ckbot is a self-hosted, full-stack AI assistant designed specifically for offensive security professionals. It wraps a large language model with a penetration-testing persona, usage controls, and a clean chat interface — all running on infrastructure you control.
The backend is a FastAPI application backed by PostgreSQL and Redis, with Argon2id password hashing, httpOnly JWT sessions, and per-user spend caps. The frontend is a Next.js 15 App Router application with a dark-first design system.
Architecture at a glance
Browser
└─ Next.js (frontend) :3000
└─ FastAPI (backend) :8000
├─ PostgreSQL :5432
└─ Redis :6379All components ship as Docker images and are orchestrated via Docker Compose. See the Self-Hosting guide for full setup instructions.