AGNTCon + MCPCon Europe 2026

Most AI security agents are wrappers around fixed scripts. Agent-Smith takes a different approach: reusable skills encode security methodology, while the model determines how to investigate, chain tools, validate findings, and select its next action.

This session presents the architecture and lessons behind Agent-Smith, an open-source, MCP-enabled autonomous penetration-testing agent spanning web, cloud, Active Directory, source-code review, threat modeling, and AI red teaming and more. We will examine MCP tool exposure, methodology-as-code, autonomous skill chaining, model portability, ephemeral Docker sandboxes, and server-side controls for cost, execution time, and tool calls.

A practical demonstration will show Agent-Smith progressing from reconnaissance to a verified finding, reproducible proof of concept, remediation guidance, and code patch. Attendees will leave with concrete patterns for building capable agents without sacrificing isolation, observability, human oversight, or control.

“Never send a human to do a machine’s job.”