shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Run an AI tool that tests your web applications for security flaws by analyzing code and simulating attacks.
From the README
- Proof-by-exploitation reports: Shannon reports validated findings with reproducible proof-of-concept steps instead of speculative warnings.
- White-box attack planning: Shannon uses source-code analysis to guide dynamic testing and focus on realistic attack paths.
- Autonomous execution: Shannon launches reconnaissance, vulnerability analysis, exploitation, and report generation from a single command.
- Authenticated testing: configuration files can describe login flows, test credentials, TOTP, email-based login flows, focus areas, and rules of engagement.
- OWASP-focused coverage: Shannon targets exploitable Injection, XSS, SSRF, Broken Authentication, and Broken Authorization issues.
- Resumable workspaces: Shannon can resume interrupted runs without re-running completed agents.
Excerpts from the project README on GitHub. Copyright and licensing remain with the respective authors.
Claim its page: indexed whatever its rank, translated into six languages, and enriched with what you write yourself.
Get an email alert on its next release or when it starts trending — never miss the moment.
Free · no card · unsubscribe anytimeShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
shannon has 47.3k stars on GitHub. It has been forked 5.4k times. shannon is written mainly in TypeScript. It has been in active development since 2025. shannon is available under the AGPL-3.0 license. Its main topics are ai-penetration-testing, ai-security, api-security, appsec.
What is shannon?
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Is shannon open source?
shannon is an open-source project. It is released under the AGPL-3.0 license.
Is shannon free?
Yes. shannon is free and open source — you can use, modify and self-host it. Its AGPL-3.0 license is a strong copyleft: if you distribute a modified version — including offering it as a network service — your changes must be released under the same license.
What license does shannon use?
shannon is available under the AGPL-3.0 license.
What language is shannon written in?
shannon is written mainly in TypeScript.
Add this live badge to your README — your GitHub stars and directory rank, refreshed daily.
[](https://olud.ai/project/keygraphhq-shannon.html)
Measured from GitHub topics shared by both projects, weighted by how rare each topic is.