Kali Snapshot

A security workbench with 4 vCPU, 8 GiB of memory, a 32 GB disk, and Kali's security tools preinstalled.

freestyle/kali is our security workbench snapshot: 4 vCPU, 8 GiB of memory, and a 32 GB disk, with Nmap, sqlmap, and Metasploit already installed. It is designed for pentesting agents, security research, and reverse engineering.

Give an agent shell access to investigate an application, inspect binaries, or test services in a private lab. Use it for assessments you own or have permission to perform.

What’s in the snapshot

Resource or tool	Included
Hardware	4 vCPU, 8 GiB memory, 32 GB disk
Distribution	Kali rolling with the `kali-linux-headless` toolset
Security tools	Nmap, sqlmap, and Metasploit
System tools	Bash, systemd, OpenSSH, Git, curl, and WireGuard tools
Python	Python 3, pip, and venv
Package manager	`apt`, using Kali’s repositories
Linux user	`kali`, with passwordless sudo
Desktop environment	None

For application assessments, follow the AI pentesting workflow to scope the work, choose tools, and collect evidence. For binary analysis, follow the reverse-engineering workflow.

Install additional tools with apt, then save a custom snapshot to reuse your configured workspace. Kali’s package versions can change between image builds; your saved snapshot keeps the tools you installed. Snapshot branches let you try different approaches from the same starting point. They do not rewind changes to a remote target.

Create a Kali VM

Install the SDK and set FREESTYLE_API_KEY as shown in the quickstart, then select the snapshot explicitly:

import { Freestyle } from "freestyle";

const freestyle = new Freestyle();
const { vm } = await freestyle.vms.create({
  snapshotId: "freestyle/kali",
  firewall: { rules: [] },
});

const result = await vm.exec({
  command: "cat /etc/os-release; nmap --version; python3 --version",
  linuxUser: "kali",
});
console.log(result.stdout);

This example checks the installed environment without contacting a target. Add firewall rules for the targets you plan to assess. For a private lab, put Kali and the services under test in the same VPC.