Anvil

Anvil is a live AI security battle where two AI agents go head-to-head over a vulnerable Flask app. A Red Agent finds and exploits real vulnerabilities (SQL injection, IDOR, etc.) while a Blue Agent patches them in real-time — all streamed to a dark-themed dashboard with live AI reasoning. Built with MiniMax M2.7-highspeed, the whole thing runs in 3 rounds with concurrent judging, automatic rollback on bad patches, and a post-battle security report.

• Red crafts real curl attacks, Blue rewrites the actual source code
• Everything runs live — streaming extended thinking, SSE events, subprocess restarts
• No frameworks on the frontend, no hand-holding on the AI — just two agents competing