KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. observed · 2026-10-19
Health v2 · maintenance only
85/100
- Activity 100
- Release rhythm 98
- Longevity 27
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 5
- age_days: 389
- days_rel: 14
- days_push: 5
- n_releases_24m: 28
Adoption not part of the score
49090 stars · 5625 forks observed · 2026-10-19
What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-28, confidence 0.97
Shannon is an autonomous AI-driven pentesting tool for web applications and APIs. It analyzes source code, discovers attack vectors, and executes real exploits to validate vulnerabilities.
Use cases
- automatically scan a web app codebase for security flaws
- validate potential vulnerabilities with real exploits before deployment
- integrate AI-powered security testing into CI/CD pipelines
- perform continuous security assessments on APIs
- generate detailed security reports with proof-of-concept exploits
When to choose
- you need an AI-driven security scanner that can both find and exploit vulnerabilities
- you want a self‑hosted tool that runs locally from the command line
- your project is a web application or API written in any language and you have source code access
- you prefer open‑source software with an AGPL license
When to avoid
- you require a fully managed SaaS solution with no local setup
- your environment cannot run Node.js or install npm packages
- you need compliance certifications that restrict AGPL‑licensed tools
- you only need static analysis without exploit validation
Facets
cli-tool · maturity active
security testing cli security web-development cross-platform cli ai-pentester web-app api llm agpl-3.0 devops nodejs
10 sources
- readme: https://github.com/KeygraphHQ/shannon · fetched 2026-10-19 · e72d3e3b9d14
- homepage: https://keygraph.io/ · fetched 2026-09-14 · bb1d133d3e1c
- site_page: https://keygraph.io/docs · fetched 2026-09-14 · aa0c895bfabb
- site_page: https://keygraph.io/pricing.html · fetched 2026-09-14 · 304f1335db5f
- site_page: https://keygraph.io/agentic-sast.html · fetched 2026-09-14 · 24d101beee2b
- site_page: https://keygraph.io/agentic-blackbox-pentester.html · fetched 2026-09-14 · d647d28d167b
- site_page: https://keygraph.io/business-logic-testing.html · fetched 2026-09-14 · ae733c0a2f99
- site_page: https://keygraph.io/sca.html · fetched 2026-09-14 · e8b0478f102c
- site_page: https://keygraph.io/secrets-scanning.html · fetched 2026-09-14 · 0e641da5da7b
- site_page: https://keygraph.io/agentic-whitebox-pentester.html · fetched 2026-09-14 · 88828a902d45
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| KeygraphHQ/shannon | main | 85 |
For agents
markdown · JSON · MCP: product_card(name="KeygraphHQ/shannon")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem