AWESOME
TUI
.com
Back to Catalog
johannus22 GitHub avatar
@johannus22/zentraVerified Maintainer

zentra

Scanning code for vulnerabilities using ai including feeding it in a single window in claude code, codex, etc. and being

Demo

Terminal preview
zentra
zentra project visual

Overview

AI-powered CLI tool for application security scanning

Zentra is an open source CLI agent harness tool designed to assist with SAST and DAST on your application

From the maintainer

Maintainer profile

zentra

Scanning code for vulnerabilities using ai including feeding it in a single window in claude code, codex, etc. and being

AI-powered CLI tool for application security scanning and agentic pentesting

Origin story

Scanning code for vulnerabilities using ai including feeding it in a single window in claude code, codex, etc. and being locked to one ai provider. Assisting and copiloting agentic pentesting in this agentic era of cybersecurity.

First workflow

Open a codebase in terminal, call zentra, run a code scan, generated a report at .zentra/ folder in the root of the project directory.

Design choice

Can be controlled with only keyboard, Fast TUI with Rust using ratatui.

macOSLinuxWindows

Latest Release

Zentra CLI v0.15.3
Released: Sep 2, 2026

Zentra CLI v0.15.3

This patch makes the interactive menu clearer and resolves the open dependency security advisories.

Menu clarity

  • Groups actions under faint SAST, DAST, and Misc. headings.
  • Renames the local workflow to Run SAST Scan (this directory).
  • Keeps View Last SAST Results with the other SAST actions.
  • Clarifies dynamic testing as Run Pentest on Live Site.
  • Keeps group headings non-selectable, so keyboard navigation moves only through actions.

Dependency security

  • Updates Ratatui from 0.29 to 0.30.2 and Crossterm from 0.28 to 0.29.
  • Updates h2 to 0.4.19 for RUSTSEC-2026-0258.
  • Updates event-listener to 5.4.2 for RUSTSEC-2026-0221.
  • Updates lru to 0.18.3 for RUSTSEC-2026-0002 and RUSTSEC-2026-0253.
  • Confirms anyhow 1.0.103 contains the RUSTSEC-2026-0190 fix.
  • Removes the unmaintained transitive paste crate (RUSTSEC-2024-0436).
  • cargo audit --deny warnings now passes with no advisories.

Validation

  • Linux, macOS, and Windows test and Clippy jobs passed.
  • 563 library tests and all integration suites passed locally.
  • Release artifacts were built for Linux, Windows, Intel macOS, and Apple Silicon macOS.

Full Changelog: https://github.com/johannus22/zentra/compare/v0.15.2...v0.15.3

Discussions

0 comments
Loading comments...
Alvin By Alvin