Mosh is an open-source, model-driven application security testing harness that wraps around LLMs to automate penetration testing through discovery, planning, dockerized execution, and reporting.

Mosh (Model-driven Open Security Harness) is an open-source security testing application designed to automate the work of a security researcher. Instead of relying on raw prompts, the tool implements a multi-step workflow starting with application discovery (mapping routes and technologies), security planning (creating test hypotheses), and controlled test execution through Docker containers using engagement settings. It continuously writes structured reports and memory logs, allowing developers to safely run, review, and reproduce pen-testing results iteratively as vulnerabilities are resolved.