KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
- Stars
- 51.3k
- Forks
- 6k
- Language
- TypeScript
- License
- AGPL-3.0
- Last commit
- updated Nov 2026
Straight from GitHub
Nobody has written up this repo. Everything on this page comes straight from the GitHub API, so there is no founder write-up, no pros and cons, and no difficulty rating — rather than a generated guess at them.
Maintenance
Pushed within three months of the last stats read (as of Nov 6, 2026).
Licence
AGPL-3.0
Tech stack
Primary language: TypeScript. GitHub reports only the dominant language, so this is not the whole stack.
Install
No install command has been verified for this repo. Follow the README rather than a guess.
Quality score
Computed by the discovery import when this entry was added.
- Recent activity×0.30
- 1.00
How recently the default branch was pushed to.
- Adoption×0.20
- 1.00
Stars on a log scale, so adoption counts without dominating.
- Description and topics×0.15
- 1.00
Whether the repo describes itself: description, topics, homepage.
- README present×0.15
- 1.00
Whether the repository has a README at all.
- Licence clarity×0.10
- 1.00
Whether GitHub can resolve the licence to a recognised SPDX id.
- Issue health×0.10
- 1.00
Open issues relative to adoption, as a rough maintenance signal.
Similar repos
Same category, ranked by shared topics.
Runtime leak detector for modern web apps - finds exposed API keys, validates BaaS misconfigurations (Supabase/Firebase RLS), and catches secrets in JS bundles. Chrome extension + CLI.
275 starsPythonMITupdated Nov 2026Infrastructure & DevOpsOpen-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
7.3k starsPythonMITupdated Nov 2026Infrastructure & DevOpsFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
39.1k starsGoApache-2.0updated Nov 2026Infrastructure & DevOpsLynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
16.6k starsShellGPL-3.0updated Sep 2026Infrastructure & DevOps
Stats updated Nov 6, 2026. Stars, forks, issue counts, and dates are a snapshot read from the GitHub REST API, not a live figure. This site makes no requests to GitHub when you load a page.