diff --git a/profile/profile/README.md b/profile/profile/README.md new file mode 100644 index 0000000..5725df1 --- /dev/null +++ b/profile/profile/README.md @@ -0,0 +1,72 @@ +
+ +Keygraph. Continuous Agentic Pentesting. Built by the team behind Shannon, the open-source AI pentester. + +

We don't report what might be vulnerable. We prove what is.

+ +

Keygraph makes Shannon, the open-source AI pentester, and the Keygraph platform, continuous agentic pentesting for the enterprise.

+ +Shannon on GitHub   +keygraph.io   +Join the Discord + +
+ +
+ +

Shannon

+ +[![GitHub stars](https://img.shields.io/github/stars/KeygraphHQ/shannon?style=flat&logo=github&label=stars&labelColor=191E1D&color=D05121)](https://github.com/KeygraphHQ/shannon) +[![Latest release](https://img.shields.io/github/v/release/KeygraphHQ/shannon?style=flat&label=release&labelColor=191E1D&color=D05121)](https://github.com/KeygraphHQ/shannon/releases) + +Shannon is an autonomous AI pentester for web applications and APIs. It reads your source code, maps the attack paths, and runs real exploits against your running app. Only vulnerabilities with a working proof of concept make the report. **No exploit, no report.** + +```bash +npx @keygraph/shannon@latest +``` + +**Your model, your key.** Anthropic, OpenAI, xAI, AWS Bedrock, LLM gateways, or a local model through Ollama, vLLM or LM Studio. Keygraph never proxies your model traffic. + +**Local or in CI.** Run it from your terminal, or on pull requests, releases and schedules with the [GitHub Action](https://github.com/KeygraphHQ/shannon-action) and the [GitLab CI/CD component](https://gitlab.com/KeygraphHQ/shannon-ci). The build fails only on proven exploits. + +**Reports for people and for tools.** PDF and Markdown for your team, JSON and SARIF 2.1.0 for code scanning and security dashboards. + +**Open source** under AGPL-3.0, with commercial licensing available through [shannon@keygraph.io](mailto:shannon@keygraph.io). + +[Read the docs](https://keygraph.io/docs/) · [Quick start](https://keygraph.io/docs/tutorials/quick-start/) · [Shannon 3.0 benchmark](https://keygraph.io/shannon-benchmark) + +## The Keygraph platform + +AppSec and pentesting, on one platform. The Keygraph platform runs an enterprise-hardened build of Shannon continuously across your repositories, with the full AppSec suite around it. + +**Pentesting.** Whitebox and blackbox pentesting plus business logic testing, with a working exploit behind every pentest finding. + +**Code security.** Agentic SAST, SCA with reachability, and secrets scanning across repository history. + +**Findings to fixes.** One record per vulnerability across every scan and scanner, fix pull requests, and fix verification by re-analysis and exploit replay. + +**Deployment.** Cloud-hosted, self-hosted, or fully air-gapped. You choose the models, always with your own key. + +**Governance.** SSO, SCIM, RBAC, audit logs, Jira sync, and SOC 2 Type II. + +**[Schedule a technical demo →](https://cal.com/team/keygraph/keygraph-technical-demo)** · [Compare plans](https://keygraph.io/pricing) · [Shannon and the platform, side by side](https://github.com/KeygraphHQ/shannon/blob/main/docs/keygraph-platform.md) + +U.S. nonprofits and pre-Series-A startups can apply to the [Community Program](https://keygraph.io/community-program) to run Keygraph Pro at no cost. + +## Community + +**Discord.** Questions, setup help, and Shannon news. [Join the server](https://discord.gg/keygraph-community) + +**Office hours.** Every Thursday at 10:00 AM PT (US/EU) and 2:00 PM IST (Asia). [Book a slot](https://cal.com/george-flores-keygraph/shannon-community-office-hours) + +**Bugs and ideas.** [Open an issue](https://github.com/KeygraphHQ/shannon/issues) or [start a discussion](https://github.com/KeygraphHQ/shannon/discussions). + +
+ +
+ +Shannon runs real exploits. Use it only on applications you own or have written permission to test. + +keygraph.io · X · LinkedIn · Discord + +
diff --git a/profile/profile/assets/button-discord.png b/profile/profile/assets/button-discord.png new file mode 100644 index 0000000..d551b55 Binary files /dev/null and b/profile/profile/assets/button-discord.png differ diff --git a/profile/profile/assets/button-keygraph.png b/profile/profile/assets/button-keygraph.png new file mode 100644 index 0000000..edf842a Binary files /dev/null and b/profile/profile/assets/button-keygraph.png differ diff --git a/profile/profile/assets/button-shannon.png b/profile/profile/assets/button-shannon.png new file mode 100644 index 0000000..e4964db Binary files /dev/null and b/profile/profile/assets/button-shannon.png differ diff --git a/profile/profile/assets/keygraph-banner.png b/profile/profile/assets/keygraph-banner.png new file mode 100644 index 0000000..6f19959 Binary files /dev/null and b/profile/profile/assets/keygraph-banner.png differ diff --git a/profile/profile/assets/shannon-logo.png b/profile/profile/assets/shannon-logo.png new file mode 100644 index 0000000..f4755c1 Binary files /dev/null and b/profile/profile/assets/shannon-logo.png differ