yaklang/yakit

Yakit is an interactive application security testing platform that unifies security tools and capabilities through a domain-specific language for cybersecurity.

The platform addresses the need for security tool consolidation by implementing Yaklang, a Turing-complete domain-specific language designed for cybersecurity operations. Rather than maintaining separate tools, Yakit allows security professionals to write high-quality replacements for existing tools in Yaklang, directly integrate established ecosystem products with source modifications for better compatibility, or use a graphical interface for capabilities without writing code. The architecture centers on a gRPC server that exposes Yaklang's security capabilities to a client application, enabling both local and remote deployment across different platforms.

Yakit suits organizations seeking to consolidate their security tooling into a unified platform and teams with security professionals ranging from those comfortable writing domain-specific code to those preferring graphical workflows. The tool is particularly relevant for teams conducting penetration testing, red team operations, and blue team defense work who want to avoid managing multiple disparate tools. The platform's approach of providing both programmatic access through Yaklang and graphical interfaces means it can serve different skill levels within the same organization.

The project maintains active engagement with its user community through issue tracking and discussions. Development activity shows consistent attention to bug reports and feature requests from users. The codebase demonstrates ongoing refinement of both the core engine and client interfaces to improve usability across different deployment scenarios.