shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Tech stack & purpose
Shannon is an autonomous AI pentester for web applications and APIs developed by Keygraph. It analyzes source code to identify attack vectors and executes real exploits to prove vulnerabilities before production deployment. The project is built as a TypeScript monorepo using pnpm workspaces and Turborepo for orchestration, with a CLI package published to npm that orchestrates Docker containers running Temporal workflows; the worker executes a five-phase penetration testing pipeline (pre-reconnaissance, reconnaissance, vulnerability analysis, exploitation, and reporting) using the pi harness agent framework with support for multiple AI providers including Anthropic, OpenAI, xAI, and AWS Bedrock, while employing browser automation via Playwright and TOTP generation for authenticated whitebox scans.
Community & reference links
Languages
Contributors
- ajmallesh87 commits
- ezl-keygraph78 commits
- Arjun Malleswaran36 commits
- keygraphVarun35 commits
- george-keygraph26 commits
- Khaushik-keygraph10 commits
- Varun Sivamani1 commits
- rnxj-keygraph1 commits
- Ezhil1 commits
- nelliekeygraph1 commits