git404hub

what is miko fr?

openaisec/miko — explained in plain English

Analysis updated 2026-05-18

178TypeScriptAudience · developerComplexity · 3/5Setup · moderate

tl;dr

Miko is a desktop AI agent for penetration testers that automatically probes targets, remembers findings across a session, and ships with built-in security tools and skills.

vibe map

mindmap
  root((Miko))
    What it does
      Security testing agent
      Automated probing
      Session memory
      Exploration mode
    Tech stack
      TypeScript
      Tauri
      React
      Rust
    Use cases
      Penetration testing
      Code auditing
      Vulnerability scanning
      Reverse engineering
    Audience
      Pentesters
      Security auditors
      Bug hunters

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

what do people make with this?

VIBE 1

Run automated information gathering and port scanning against a target you're authorized to test.

VIBE 2

Perform code audits to look for vulnerabilities like SQL injection or XSS in an application.

VIBE 3

Convert a one-off security testing session into a persistent project to track findings over time.

VIBE 4

Use built-in tools like subfinder and gobuster for subdomain discovery and directory brute forcing.

what's the stack?

TypeScriptTauriReactRustBun

how it stacks up fr

openaisec/mikochoyiny/saasmaillocoremind/locoagent
Stars178176181
LanguageTypeScriptTypeScriptTypeScript
Setup difficultymoderatemoderatehard
Complexity3/53/54/5
Audiencedeveloperpm founderdeveloper

Figures from each repo's GitHub metadata at analysis time.

how do i run it?

Difficulty · moderate time til it works · 30min

Portable build needs an API key from a supported AI model provider, building from source needs Bun, Rust, and Visual Studio on Windows.

in plain english

Miko is a desktop application built for security testing, specifically for gathering information and probing targets during penetration tests and security audits. It is written in TypeScript with a Tauri and React based interface, so it runs as a cross platform desktop client rather than a web app. The tool centers on an AI agent that keeps memory of what it has found across a session, using something the project calls a blackboard mechanism. This lets the agent remember earlier discoveries, reasoning, and actions across multiple rounds of testing instead of starting fresh each time. It also has an exploration mode that keeps digging into a target automatically, and a focus system that locks onto a target and tracks unfinished leads so nothing gets left half checked. Users can switch between expanding sideways to cover more of an attack surface or drilling down into one specific weak point, and progress is shown visually as the exploration happens. A session that starts as a quick test can be turned into a full project with one click, keeping all findings and history intact. Miko ships with 23 built in skills covering information gathering, code auditing, vulnerability probing, and reverse engineering, plus eight preinstalled tools including subfinder, katana, fscan, gobuster, and radare2. It supports multiple AI models, including DeepSeek, Qwen, and Azure OpenAI. For non-technical readers: this is not a general purpose coding assistant. It is a specialized agent meant for people doing authorized penetration testing or security audits, and its automated exploration mode can run real probing actions using tools like Bash and web requests. The maintainers warn against combining fully automatic permissions with exploration mode in untrusted environments, since sub-agents may wait on permission checks and time out. To get started, users download a portable Windows build from the project's Releases page, unzip it to a writable folder, and add an API key for their chosen AI model in settings. Building from source requires Bun and Rust, plus Visual Studio on Windows for the C++ desktop workload. The project is maintained by OpenAisec and welcomes issues and pull requests.

prompts (copy fr)

prompt 1
Set up Miko with a DeepSeek API key and start an exploration mode scan against my authorized test target.
prompt 2
Walk me through converting my current Miko testing session into a saved project.
prompt 3
Explain what the blackboard mechanism does and how it helps track findings across multiple probes.
prompt 4
Show me how to use the built-in subfinder and gobuster tools inside Miko for subdomain and directory discovery.

Frequently asked questions

what is miko fr?

Miko is a desktop AI agent for penetration testers that automatically probes targets, remembers findings across a session, and ships with built-in security tools and skills.

What language is miko written in?

Mainly TypeScript. The stack also includes TypeScript, Tauri, React.

How hard is miko to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is miko for?

Mainly developer.

peek the repo → explain another one

This repo across BitVibe Labs

double-check against the repo, no cap.