VXControl
VXControl is a security engineering studio building open-source autonomous-agent tooling for offensive security teams, specifically the PentAGI platform.
At a Glance
- Offensive Security Teams
- SOC & AppSec Engineers
- Security Researchers
- Enterprise Cybersecurity Departments
AI Tools by VXControl
(1)PentAGI
AI Agent for Pen Testing
Discussions
No discussions yet
Be the first to start a discussion about VXControl
Latest News
Products & Services
A fully autonomous AI-powered penetration testing platform that uses specialized agents to perform reconnaissance, vulnerability discovery, and exploit development.
Lightweight, headless Kali Linux Docker images curated for automated security testing environments.
A structured taxonomy of vulnerabilities, techniques, and tooling categories used to guide PentAGI agents.
A Go client for the Graphiti knowledge graph, providing long-term semantic memory for PentAGI agents.
Market Position
Differentiated by an open-source, self-hosted, and MIT-licensed approach compared to proprietary AI-augmented security vendors like Pentera and Horizon3.ai.
Leadership
Founders
Dmitrii Nagibin
Founder and Director at VXControl. Previously a senior researcher and head of development for security protection means at Positive Technologies (2014-2022+). Known for identifying vulnerabilities in major industrial systems (e.g., Siemens SIMATIC WinCC) and extensive work in offensive security and red teaming.
Executive Team
Dmitrii Nagibin
Founder & Director
Cybersecurity veteran and former researcher at Positive Technologies.
Sergey Kozyrenko
Head of Design
Leading product design and user experience from Phuket, Thailand.
Founding Story
VXControl was started because offensive security tools had not kept pace with attacker evolution. The vision was to build open-source, self-hosted, and sandboxed AI-agent infrastructure that allows any team to run agentic security operations without relying on proprietary, vendor-locked solutions.
Business Model
Revenue Model
Open-source by default with a focus on self-hosted infrastructure. Revenue sources include managed cybersecurity services, consulting, and potential enterprise support as indicated by their Dubai trade license activities.
Target Markets
- Offensive Security Teams
- SOC & AppSec Engineers
- Security Researchers
- Enterprise Cybersecurity Departments
- Automated reconnaissance and vulnerability discovery
- Continuous red-teaming for SOC/AppSec teams
- Exploit development in isolated environments
- Security research automation
- Open-source community
- Defensive security teams worldwide