KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
An AI agent that pentests code and only reports proven exploits — Shannon is an open-source agent that reads your source code, maps attack paths, and actually executes exploits against web apps and APIs rather than just flagging suspected issues—no exploit, no report. Run it locally via npx for CI/CD or pre-production security checks; useful for appsec and devsecops teams wanting automated, evidence-based pentesting.
Evidence (last 7 days): Zenn 8 likes
Metrics
Retention can be computed 30 days after a repository first trends (it isn't shown until then). See About for how each metric is defined.
Star growth and Trending appearances (last 30 days)
Bands mark days on the trending list (darker = higher rank)
Daily trending ranks as a table (1 days)
| Date | Daily |
|---|---|
| Oct 29, 2026 | typescript #9 +476 |
Created Sep 27, 2025 · First on trending Oct 29, 2026
Where it's being discussed
Posts that are about this repository. Japan means Japanese-language tech media and videos; it says nothing about how widely the project is used in Japan.
Other notable repositories in the same category (Security)
- openai/php2shell-checker
- togg53192-cmd/jailbreaks
- anthropics/sandbox-runtime
- Autumn-27/ARTEX
- Mcsd7/ReaDroid
See all Security repositories →
Rank within ai-security
| # | Repository | ★ |
|---|---|---|
| 1 | usestrix/strix | 72,586 |
| 2 | KeygraphHQ/shannon | 50,170 |
| 3 | NVIDIA/SkillSpector | 23,099 |
| 4 | openai/codex-security | 11,247 |
| 5 | nolabs-ai/nono | 4,732 |
| 6 | stacklok/toolhive | 2,313 |
| 7 | uber/ADR | 2,085 |
| 8 | pashov/skills | 1,290 |
| 9 | h5i-dev/h5i | 885 |
| 10 | antropos17/Aegis | 160 |