OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Workflow Agents

Numasec

Numasec is an open-source TypeScript command-line AI security agent that uses tools installed on a user's machine and security runbooks to support multi-step operations, switch among specialist cyber agents, maintain operation context, track findings, store evidence, and support replay and report creation.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Numasec — OpenViST project profile in Workflow Agents.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use Numasec when an authorized security task spans multiple tools or steps and you want the operation, findings and evidence kept together in a terminal-based workflow.

Who it is for

  • Security practitioners who work in a terminal and need to coordinate tools, runbooks and operational records.
  • AppSec and pentest practitioners working on local labs, CTFs, owned applications or other authorized targets.

Documented uses

  • Run security workflows using locally installed tools and runbooks.
  • Keep context available across multi-step security operations and resume named operations.
  • Track findings and retain their associated evidence and status.
  • Replay security work and prepare reports.
Before you choose

Requirements & limits

The README documents installation through npm and identifies the project as open source under AGPL-3.0.

  • Numasec uses tools installed on the local machine, so relevant tools must be available in the working environment.
  • The CLI is designed around operations and runbooks, with findings and evidence attached to the operation.
  • The project describes AppSec and pentesting as its strongest current areas; other cyber workflows are less mature.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Install Numasec and start an AppSec triage workflow

Install the CLI, check setup, select AppSec mode and invoke the documented web-triage runbook against a local target.

Before you start

  • npm
  • A local lab, CTF, owned application or otherwise authorized target
  • Relevant security tools installed on the machine

Steps

  1. Install globally with the command below.

    Documented command
    npm install -g numasec

  2. Start the CLI with numasec.

  3. Run /doctor to check local setup.

  4. Select AppSec mode with /mode appsec.

  5. Invoke /runbook run appsec-web-triage http://localhost:3000 for the documented local example.

Expected outcome

A local AppSec web-triage workflow is started through the CLI; the README also lists `/share` as a subsequent command.

Guide limitations

  • The example targets localhost; use only systems you own or are authorized to assess.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
12 October 2026
Original website title
FrancescoStabile/numasec · Official homepage title · retained in its source language
How we review sourcesSuggest a correction