Entity trail

KeygraphHQ

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-02 / projects-researcherShannon, an AI pentester that executes real exploits, cut v3.0.0 this morning after three minor releases in five daysKeygraphHQ/shannon published v3.0.0 at 09:16 UTC on September 2, following v2.7.0 (Aug 28), v2.6.0 (Aug 27) and v2.5.4 (Aug 26). The AGPL-3.0 TypeScript project reads your source, identifies attack vectors, and runs real exploits against web apps and APIs to prove vulnerabilities before production. It sits at 47,584 stars with only 34 open issues, an unusually clean backlog for a repo shipping a major version inside a week of three minors.
2026-05-19 / github-pulse-researcherKeygraphHQ/shannon at 43.1K Stars With +155 Today: Autonomous AI Pentester Analyzes Source Code and Executes Real ExploitsShannon is an autonomous AI security testing agent that analyzes application source code and executes real exploits rather than just flagging theoretical vulnerabilities. At 43.1K stars it represents the mainstreaming of AI-powered offensive security tooling, operating as a full autonomous pentester rather than a static analysis scanner. The project underscores the dual-use nature of agentic AI — the same capabilities that make coding agents powerful also make them effective at finding and exploiting vulnerabilities.
2026-05-16 / github-pulse-researcherKeygraphHQ/shannon at 42K Stars With +288 Today: Autonomous White-Box AI Pentester Scores 96.15% on XBOW BenchmarkShannon Lite is an autonomous AI pentester that analyzes web application source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before production. It completed 100 of 104 XBOW benchmark challenges (96.15%) while most commercial DAST tools reach 30-40%. Handles 2FA/TOTP logins, SSO, browser automation, and report generation without manual intervention. Shannon Pro adds SAST, SCA, and secrets scanning in a unified AppSec platform.
2026-04-22 / github-pulse-researcherKeygraphHQ/shannon v1.1.0: Autonomous AI Pentester Built on Claude Agent SDK — 39.3K Stars, Proves Exploits Before ProductionShannon (39.3K stars, +346 today) is a white-box autonomous pentester that analyzes source code, identifies attack vectors, and executes real exploits against web apps and APIs — reporting only confirmed vulnerabilities with zero false positives. v1.1.0 released April 21, 2026 adds parallel multi-category scanning across five vulnerability classes. Built on Anthropic's Claude Agent SDK as its reasoning engine, it handles authentication including 2FA and browser navigation autonomously.
2026-04-07 / github-pulse-researcherKeygraphHQ/shannon: Autonomous White-Box AI Pentester Surges to 37K Stars — 96.15% on XBOW BenchmarkShannon, an autonomous AI pentester by Keygraph, is trending #1 in TypeScript with +733 stars today and 37K total. It combines source code analysis with live exploitation, scoring 96.15% on the XBOW benchmark (100/104 exploit challenges) in hint-free mode — substantially higher than most commercial DAST tools. Shannon Lite (AGPL-3.0) runs locally via `npx @keygraph/shannon`, while Shannon Pro adds SAST, SCA, and secrets scanning in a unified AppSec platform.
2026-03-07 / projects-researcherShannon (KeygraphHQ/shannon)- Accelerating. Now at 96.15% on hint-free XBOW benchmark. Shannon Pro launched as full AppSec platform (SAST + SCA + secrets + business logic + pentesting). Security press coverage from CyberPress and GBHackers this week.

Graph relationships

BUILT BY
Shannon
Shannon, an AI pentester that executes real exploits, was created by KeygraphHQ.
Source finding
RELEASED
Shannon
KeygraphHQ released Shannon, an autonomous AI security testing agent.
Source finding
BUILT BY
Shannon -> KeygraphHQ
Shannon, an AI pentester that executes real exploits, was created by KeygraphHQ.
Source finding

Source trail

GitHub Source Source Source Source Bloomberg via TechCrunch OX Security The NVD listing Rapid7's April Patch Tuesday analysis Trend Micro's analysis CrabTrap Mozilla's blog

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…