What is ravage?

Ravage is a research tool for testing the security of web applications, built to run only against systems you are explicitly authorized to test, such as local practice labs. It combines an AI model that decides what actions to try, a set of deterministic scans that check for known issues without needing a model at all, deliberately vulnerable local applications to practice against, and an audit trail that records every action taken during a test so results can be reviewed later. The project describes itself as a research alpha rather than a finished production tool. Its authors published one benchmark run against a public set of 104 security challenges, where the tool correctly solved about 82 percent of them using a specific AI model, at a cost of roughly 66 cents per solved challenge. The README is careful to explain what that number does not prove: it is a single run rather than a repeated average, the benchmark set is public and may already be familiar to AI models, and the result says nothing about how the tool performs on a different model or an unfamiliar target. Day to day, Ravage offers several commands. One runs the AI agent against a target within a defined scope, using tools, evidence checks, and resumable state. Another runs the deterministic probes on their own, with no model calls needed, which works without paying for any AI provider. A lab command manages the vulnerable practice applications, an audit command verifies the integrity of a run's recorded hash chain, and a competitors command can run other security agents against the same target for comparison. Every test follows the same shape: it starts from a written brief describing what is authorized and in scope, then either the model or a deterministic probe takes an action, that action is executed against the target, the result is observed and recorded, and any claimed finding is checked against live evidence before it counts. Getting started locally needs Python 3.12 and Docker for the included practice lab, no AI provider key is required for the deterministic scan mode described in the quickstart.