Update README.md

This commit is contained in:
keygraphVarun authored and GitHub committed 2026-03-18 14:29:49 -07:00
1 parent e63a368a75
commit 6d954ff8d9
1 file changed
+40 -1
+40 -1
View File
@@ -1 +1,40 @@
# .github
<div align="center">
<img src="https://raw.githubusercontent.com/KeygraphHQ/shannon/main/assets/github-banner.png" alt="Shannon: AI Pentester for Web Applications and APIs" width="100%">
<br />
We build **[Shannon](https://github.com/KeygraphHQ/shannon)**, an open source AI pentester for web applications and APIs.
<a href="https://discord.gg/9ZqQPuhJB7"><img src="https://raw.githubusercontent.com/KeygraphHQ/shannon/main/assets/discord.png" height="40" alt="Join Discord"></a>
<a href="https://keygraph.io/"><img src="https://raw.githubusercontent.com/KeygraphHQ/shannon/main/assets/Keygraph_Button.png" height="40" alt="Visit Keygraph.io"></a>
</div>
---
### How Shannon works
Shannon analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities, not flag theoretical risks. It combines static code review with dynamic exploitation across four phases: reconnaissance, parallel vulnerability analysis, parallel exploitation, and reporting.
It targets injection, XSS, SSRF, and broken authentication/authorization, validating every finding with a reproducible proof-of-concept. If it can't exploit it, it doesn't report it.
→ **[Get started](https://github.com/KeygraphHQ/shannon#-setup--usage-instructions)**
---
### Get involved
- **Report bugs**: [GitHub Issues](https://github.com/KeygraphHQ/shannon/issues)
- **Ask questions & share feedback**: [GitHub Discussions](https://github.com/KeygraphHQ/shannon/discussions) · [Discord](https://discord.gg/9ZqQPuhJB7)
- **Office hours**: Free 1:1 sessions every Thursday for setup help and questions. [Book a slot](https://cal.com/george-flores-keygraph/shannon-community-office-hours)
---
### About the company
Keygraph is a security and compliance platform for modern engineering teams, covering application security and compliance automation. Shannon is the AppSec layer.
Shannon Lite (this repo) is the open source core. [Shannon Pro](https://github.com/KeygraphHQ/shannon/blob/main/SHANNON-PRO.md) is the full all-in-one AppSec platform that extends it with agentic SAST, SCA with reachability analysis, secrets detection, business logic testing, and CI/CD integration.
→ [keygraph.io](https://keygraph.io)