mirror of
https://github.com/KeygraphHQ/.github.git
synced 2026-11-07 11:05:58 -10:00
Update README.md
This commit is contained in:
1 parent
e63a368a75
commit
6d954ff8d9
1 file changed
+40
-1
@@ -1 +1,40 @@
|
||||
# .github
|
||||
<div align="center">
|
||||
|
||||
<img src="https://raw.githubusercontent.com/KeygraphHQ/shannon/main/assets/github-banner.png" alt="Shannon: AI Pentester for Web Applications and APIs" width="100%">
|
||||
|
||||
<br />
|
||||
|
||||
We build **[Shannon](https://github.com/KeygraphHQ/shannon)**, an open source AI pentester for web applications and APIs.
|
||||
|
||||
<a href="https://discord.gg/9ZqQPuhJB7"><img src="https://raw.githubusercontent.com/KeygraphHQ/shannon/main/assets/discord.png" height="40" alt="Join Discord"></a>
|
||||
<a href="https://keygraph.io/"><img src="https://raw.githubusercontent.com/KeygraphHQ/shannon/main/assets/Keygraph_Button.png" height="40" alt="Visit Keygraph.io"></a>
|
||||
|
||||
</div>
|
||||
|
||||
---
|
||||
|
||||
### How Shannon works
|
||||
|
||||
Shannon analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities, not flag theoretical risks. It combines static code review with dynamic exploitation across four phases: reconnaissance, parallel vulnerability analysis, parallel exploitation, and reporting.
|
||||
|
||||
It targets injection, XSS, SSRF, and broken authentication/authorization, validating every finding with a reproducible proof-of-concept. If it can't exploit it, it doesn't report it.
|
||||
|
||||
→ **[Get started](https://github.com/KeygraphHQ/shannon#-setup--usage-instructions)**
|
||||
|
||||
---
|
||||
|
||||
### Get involved
|
||||
|
||||
- **Report bugs**: [GitHub Issues](https://github.com/KeygraphHQ/shannon/issues)
|
||||
- **Ask questions & share feedback**: [GitHub Discussions](https://github.com/KeygraphHQ/shannon/discussions) · [Discord](https://discord.gg/9ZqQPuhJB7)
|
||||
- **Office hours**: Free 1:1 sessions every Thursday for setup help and questions. [Book a slot](https://cal.com/george-flores-keygraph/shannon-community-office-hours)
|
||||
|
||||
---
|
||||
|
||||
### About the company
|
||||
|
||||
Keygraph is a security and compliance platform for modern engineering teams, covering application security and compliance automation. Shannon is the AppSec layer.
|
||||
|
||||
Shannon Lite (this repo) is the open source core. [Shannon Pro](https://github.com/KeygraphHQ/shannon/blob/main/SHANNON-PRO.md) is the full all-in-one AppSec platform that extends it with agentic SAST, SCA with reachability analysis, secrets detection, business logic testing, and CI/CD integration.
|
||||
|
||||
→ [keygraph.io](https://keygraph.io)
|
||||
Reference in new issue
Block a user