Shannon
Open-source AI pentester that reads web app source code and proves vulnerabilities with working exploits
Agent by Keygraph
IndexedAGPL-3.0★ 49,305
Get started
Setup steps are in the repository. Website · Repository
About
Shannon is an open-source agent from Keygraph that tests web applications and their APIs for security flaws. It reads the application's source code to find attack paths, then uses browser automation and command-line tools to run exploits against the running app. Only findings backed by a working proof of concept appear in the final report. It runs locally from the command line.
Use cases: security, security-scanning, browser-automation
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Fact sheet
- Jobs
- securityREADME
- Autonomy
- Autonomous: runs tasks end to end and reports backREADME
- Where you use it
- TerminalREADME
- Hosting
- You run itREADME
- Open source
- YesREADME
Facts extracted by Claude Sonnet 5.5 from the linked sources on Oct 24, 2026; reviewed Oct 24, 2026. Wrong fact? Tell us.
Signals
- Stars
- 49,305
- Forks
- 5,642
- Open issues
- 9
- Last commit
- Oct 15, 2026 (13 days ago)
- Last release
- Oct 6, 2026 (22 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- AGPL-3.0
- Repository
- github.com/KeygraphHQ/shannon
- Website
- keygraph.io/
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- READMEgithub-graphql
Cite this page
Shannon. Agent Mart. https://agentmart.dev/agents/shannon (last updated 2026-10-24)