Rovo 🚀

Rovo is a self-contained, AI-powered assessment assistant designed to scan, analyze, and map web applications. It leverages advanced browser automation, filesystem analysis, and an execution sandbox to comprehensively assess target applications and stream reasoning steps directly to a beautiful visual dashboard.

✨ Features

• 🧠 Intelligent Agent Loop: Executes a structured Observe → Think → Plan → Act → Verify → Report cycle to complete tasks.
• 🌐 Browser Automation Agent: Navigates pages, fills out forms, captures screenshots, intercepts network requests, and executes actions using Playwright.
• 💻 Sandboxed Terminal & Filesystem Agent: Runs shell commands and reads/writes files safely, logging all modifications.
• 📊 Interactive Dashboard: Stream agent reasoning steps, live terminal outputs, screenshot previews, and page graphs in real-time.
• 📁 Comprehensive Reports: Exports beautiful dark-mode HTML, PDF, or raw JSON reports detailing discoveries, technology stacks, and security/vulnerability findings.
• 🔌 Multi-Provider Support: Integrates out-of-the-box with OpenAI, OpenRouter, Ollama (Local), or any OpenAI-compatible API endpoint.
• ⚙️ Zero Native Dependencies: Designed to run cleanly on Windows and macOS without compilation problems (node-gyp or native database bindings).

🚀 Getting Started

1. Installation

Install Rovo globally using npm:

npm install -g @youssefofficial2411/rovo

2. Configure Your AI Provider

Run the interactive setup wizard to configure your preferred AI provider:

rovo setup

The wizard will guide you through selecting a provider (OpenAI, OpenRouter, Ollama, or Custom), configuring the API key, model name, and testing the connection.

3. Start an Assessment Scan

Initiate a full scan on your target application URL:

rovo scan https://example.com

Note: For testing browser automation, make sure Playwright browsers are installed locally (npx playwright install chromium).

4. Launch the Dashboard UI

Launch the visual dashboard locally to view session history, configure providers, and see real-time scan progress:

rovo web

🛠️ CLI Commands Reference

| Command | Description | | :--- | :--- | | rovo setup | Interactive wizard to add, edit, or test AI providers. | | rovo scan <url> | Launches a scanning assessment loop on the target URL. | | rovo web | Starts the Next.js visual dashboard locally (default: http://localhost:3000). | | rovo export | Interactive menu to export findings from any session as HTML, PDF, or JSON. |

📁 Storage & Configuration

Rovo persists configurations and session data locally to ensure fast, zero-dependency storage:

• Config & Session File: ~/.rovo/data.json
• Screenshots Directory: ~/.rovo/screenshots/
• Generated Reports: ~/.rovo/reports/

⚠️ Disclaimer

This tool is designed exclusively for authorized penetration testing and security assessment environments. The author is not responsible for any misuse, damage, or unauthorized actions performed using this tool.