This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+12 more
Summary
AI summaryFixed three user‑facing failure modes so ptai start always produces findings and exits cleanly.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
`ptai start` now produces findings on a vulnerable target regardless of LLM used and always exits cleanly. `ptai start` now produces findings on a vulnerable target regardless of LLM used and always exits cleanly. Source: granite4.1:30b@2026-05-27-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes two assertion bugs in CI matrix test that blocked PyPI publish. Fixes two assertion bugs in CI matrix test that blocked PyPI publish. Source: llm_adapter@2026-05-27 Confidence: high |
— |
Full changelog
Closes issue #12. Three user-facing failure modes fixed across two reporters (poeylizn on DeepSeek-via-OpenAI-compat, as8ASd3 on Ollama with no PENTEST_AI_LLM_PROVIDER).
Headline: ptai start now produces findings on a vulnerable target regardless of which LLM you have, and always exits cleanly.
Live-verified end-to-end with Ollama qwen2.5-coder:7b against the local honeypot: 63 findings (13 critical, 6 high) emerged via the safety-net escalation path, clean exit in 193 s.
What's in 0.17.1 vs 0.17.0: 0.17.1 is the same production code as 0.17.0 plus a CI test fix (0.17.0's new matrix test had two assertion bugs that blocked PyPI publish). The actual user-facing fixes are unchanged.
See CHANGELOG.md for the full surface.
Install / upgrade:
```
pipx upgrade ptai
or
pip install --upgrade ptai
```
If ptai start still surprises you, run ptai doctor for a single-command diagnostic of your provider config.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About pentest-ai
Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.
Related context
Related tools
Beta — feedback welcome: [email protected]