From 6d954ff8d94a0236f7b667be065737f64faf35b4 Mon Sep 17 00:00:00 2001 From: keygraphVarun Date: Wed, 18 Mar 2026 14:29:49 -0700 Subject: [PATCH] Update README.md --- README.md | 41 ++++++++++++++++++++++++++++++++++++++++- 1 file changed, 40 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index a46ae92..2ad3a6d 100644 --- a/README.md +++ b/README.md @@ -1 +1,40 @@ -# .github \ No newline at end of file +
+ +Shannon: AI Pentester for Web Applications and APIs + +
+ +We build **[Shannon](https://github.com/KeygraphHQ/shannon)**, an open source AI pentester for web applications and APIs. + +Join Discord +Visit Keygraph.io + +
+ +--- + +### How Shannon works + +Shannon analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities, not flag theoretical risks. It combines static code review with dynamic exploitation across four phases: reconnaissance, parallel vulnerability analysis, parallel exploitation, and reporting. + +It targets injection, XSS, SSRF, and broken authentication/authorization, validating every finding with a reproducible proof-of-concept. If it can't exploit it, it doesn't report it. + +→ **[Get started](https://github.com/KeygraphHQ/shannon#-setup--usage-instructions)** + +--- + +### Get involved + +- **Report bugs**: [GitHub Issues](https://github.com/KeygraphHQ/shannon/issues) +- **Ask questions & share feedback**: [GitHub Discussions](https://github.com/KeygraphHQ/shannon/discussions) · [Discord](https://discord.gg/9ZqQPuhJB7) +- **Office hours**: Free 1:1 sessions every Thursday for setup help and questions. [Book a slot](https://cal.com/george-flores-keygraph/shannon-community-office-hours) + +--- + +### About the company + +Keygraph is a security and compliance platform for modern engineering teams, covering application security and compliance automation. Shannon is the AppSec layer. + +Shannon Lite (this repo) is the open source core. [Shannon Pro](https://github.com/KeygraphHQ/shannon/blob/main/SHANNON-PRO.md) is the full all-in-one AppSec platform that extends it with agentic SAST, SCA with reachability analysis, secrets detection, business logic testing, and CI/CD integration. + +→ [keygraph.io](https://keygraph.io)