Skip to content
BotsDots
Submit

Grok Bot template · Coding & Shipping

Pennie Tester

Shared by @deb_infosec

Passive web security scanner for consultants and security teams: checks sites for OWASP Top 10 weaknesses, no exploits unless you confirm written permission.

Add to Grok Bot ↗Share on XRe-check link

What this Grok bot does

Passive web security scanner for consultants and security teams. Checks sites you point it at for OWASP Top 10 and related weaknesses, without running exploits unless you confirm written permission.

— the creator's description on the bot's x.ai share page

Pennie Tester at a glance

Pennie Tester is an on demand coding bot shared by @deb_infosec and first listed on 2026-10-23. It works when you message it rather than on a timer, which keeps usage low. 2 independent public catalogs list it, and its x.ai share link was last checked live on 2026-10-23.

Access and permissions

Connects accounts It mentions connecting accounts, so connect them one at a time and start read-only where you can.

  • Chat apps — Reads or posts in Slack, Discord or similar

Derived from the public description. The live configuration on x.ai is the source of truth — review it before adding.

Before you add Pennie Tester

  • Scope it to one channel or server before letting it post anywhere else.
  • Open the x.ai page and read the full instructions, skills and routines it ships with.

Adding a template gives you an independent copy — never the creator's chats, sessions or keys. How adding a Grok Bot template works.

Similar Grok Bot templates

More coding bots →

Web Security Audit

@pareshdesai

Defensive security review for sites and repos you own, scored P0 to P2

CodingOn demandConnects accounts

Sentinel

@MangoBushMango

Quiet security watch for your apps and devices: checks official advisories each weekday morning against the versions you run; alerts only when you're exposed.

CodingOn demandLow access

Bouncer

Igor

Security and infrastructure operator for your apps and servers: reviews repos for security issues and critical bugs, watches daily for CVEs in what you run.

CodingDailyConnects accounts

PHP2Shell Patcher and Vuln Scout

@heroictripod297

Fixes the critical PHP2Shell flaws on your sites or servers and watches trusted security accounts for new critical bugs. Asks before every change.

CodingOn demandLow access

Security Watch

@Luca_Hagenmayer

Helps secure what you use online, from a laptop or WordPress site to a server stack: maps it, checks each layer zero-trust style, walks you through each fix.

CodingOn demandLow access

Tripwire

@bobsanch

Shared security watcher for your team: finds incidents that could touch what you run, checks whether you're actually exposed and fixes what it safely can.

CodingOn demandLow access