Architecture
The services PentAGI runs, how they talk to each other, and what is optional.
PentAGI is a set of Docker services. The core stack is enough to run flowsflowOne run of PentAGI: a goal, the tasks created from your messages, and everything the agents did along the way.; the knowledge graphknowledge graphThe graph of hosts, services, vulnerabilities and the access between them that PentAGI builds during a test when this optional feature is enabled. It shows how findings connect. and the observability stacks are optional add-ons.
System context
Within two minutes of starting and then every three hours, PentAGI also checks update.pentagi.com for a newer build and sends a summary of the installation with the request; Update check lists what it contains and how to turn it off.
Services
| Group | Services | Compose file |
|---|---|---|
| Core | pentagi (Go backend with REST and GraphQL, React UI), pgvector (PostgreSQL with pgvector), pgexporter (PostgreSQL metrics), scraper (isolated browser) | docker-compose.yml |
| Knowledge graph | graphiti, neo4j | docker-compose-graphiti.yml |
| LLM observability | langfuse-web, langfuse-worker, clickhouse, redis, minio, postgres | docker-compose-langfuse.yml |
| System observability | grafana, otel, victoriametrics, jaeger, clickstore, loki, node-exporter, cadvisor | docker-compose-observability.yml |
ToolstoolWhat an agent acts through: a built-in capability such as the terminal, the isolated browser or web search, or a program in the sandbox such as nmap, metasploit or sqlmap. never run inside the pentagi container itself: every flow gets its own sandboxsandboxThe isolated Docker container in which agents run their tools. The interface shows it as Terminal. container, built from an image picked for the flow's goal, such as Kali Linux.
Containers
- Backend API — Go, with REST and GraphQL and Bearer-token access for automation.
- Vector store — PostgreSQL with pgvector keeps every command, output and embedding.
- Agents — the multi-agent system that plans and executes the work; see Agents.
- Sandbox — tool containers isolated from the host; in production they can live on a separate worker node.
Last updated on