Pentest-AI is an open-source AI-powered penetration testing and bug-bounty tool that separates proven findings from guesses by connecting an AI client or model to a real pentest workflow. The tool uses machine oracles to verify vulnerabilities, labeling findings as candidates or verified based on the oracle's decision. The AI model drives the investigation, but the oracle determines whether a finding is verified, preventing the model's guesses from being mistaken for results. Pentest-AI is designed for authorized bug bounty programs, allowing researchers to test systems they own or have explicit permission to assess, with a built-in dry run feature and report drafting from verified findings only.