Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Bifrost
Bifrost

KeygraphHQ/shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

#AI agent#Pentesting
Visit GitHub
TypeScript
50.5k
6.1k
8 contributors
GNU Affero General Public License v3.0
website
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast KeygraphHQ/shannon is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Aug 31 – Oct 30, 2026

Stars +3,186 in 61 days

0200400600
432

Forks +479 in 61 days

050100
65

Merged PRs 21 in 61 days

024
4

Trendshift Trendingwhere the repository ranked each day it made the top 25

Top 25 in TypeScript

2514
Aug 31Sep 8Sep 16Sep 24Oct 2Oct 10Oct 18Oct 26
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRsTypeScript
Mon, Aug 31, 2026+80+150Not trending
Tue, Sep 1, 2026+128+150#25
Wed, Sep 2, 2026+95+103Not trending
Thu, Sep 3, 2026+80+91Not trending
Fri, Sep 4, 2026+39+40Not trending
Sat, Sep 5, 2026+24+20Not trending
Sun, Sep 6, 2026+33+30Not trending
Mon, Sep 7, 2026+31+40Not trending
Tue, Sep 8, 2026+37+33Not trending
Wed, Sep 9, 2026+24+30Not trending
Thu, Sep 10, 2026+19+40Not trending
Fri, Sep 11, 2026+27+30Not trending
Sat, Sep 12, 2026+21+60Not trending
Sun, Sep 13, 2026+28+40Not trending
Mon, Sep 14, 2026+26+30Not trending
Tue, Sep 15, 2026+37+70Not trending
Wed, Sep 16, 2026+28+50Not trending
Thu, Sep 17, 2026+43+60Not trending
Fri, Sep 18, 2026+26+80Not trending
Sat, Sep 19, 2026+55+60Not trending
Sun, Sep 20, 2026+37+40Not trending
Mon, Sep 21, 2026+38+62Not trending
Tue, Sep 22, 2026+24+40Not trending
Wed, Sep 23, 2026+36+40Not trending
Thu, Sep 24, 2026+24+30Not trending
Fri, Sep 25, 2026+27+20Not trending
Sat, Sep 26, 2026+26+40Not trending
Sun, Sep 27, 2026+21+40Not trending
Mon, Sep 28, 2026+32+70Not trending
Tue, Sep 29, 2026+31+50Not trending
Wed, Sep 30, 2026+15+32Not trending
Thu, Oct 1, 2026+15+40Not trending
Fri, Oct 2, 2026+18+50Not trending
Sat, Oct 3, 2026+18+50Not trending
Sun, Oct 4, 2026+19+20Not trending
Mon, Oct 5, 2026+24+84Not trending
Tue, Oct 6, 2026+33+01Not trending
Wed, Oct 7, 2026+23+30Not trending
Thu, Oct 8, 2026+28+61Not trending
Fri, Oct 9, 2026+27+40Not trending
Sat, Oct 10, 2026+24+60Not trending
Sun, Oct 11, 2026+25+60Not trending
Mon, Oct 12, 2026+36+80Not trending
Tue, Oct 13, 2026+57+100Not trending
Wed, Oct 14, 2026+30+50Not trending
Thu, Oct 15, 2026+45+81Not trending
Fri, Oct 16, 2026+59+70Not trending
Sat, Oct 17, 2026+75+110Not trending
Sun, Oct 18, 2026+26+50Not trending
Mon, Oct 19, 2026+31+30Not trending
Tue, Oct 20, 2026+38+10Not trending
Wed, Oct 21, 2026+35+90Not trending
Thu, Oct 22, 2026+26+50Not trending
Fri, Oct 23, 2026+59+100Not trending
Sat, Oct 24, 2026+42+70Not trending
Sun, Oct 25, 2026+29+50Not trending
Mon, Oct 26, 2026+45+71Not trending
Tue, Oct 27, 2026+307+502#14
Wed, Oct 28, 2026+432+650Not trending
Thu, Oct 29, 2026+267+450Not trending
Fri, Oct 30, 2026+101+30Not trending
Total+3,186+47921
  • 1#1 on the list
  • 7Rank that day
  • Not trending
1

    • GitHub trending history

    Where the repository ranked on GitHub Trending, one dot for each day it was on a list

    Feb 7 – May 17, 2026#1 on 4 days

    #1#5#10#15#20#25
    Top 10
    Mar 2026AprMayJunJulAugSepOct
    The left and right arrow keys step from day to day; Home and End go to the first and the last

    Mentions and achievements

    Where people are talking about KeygraphHQ/shannon, and every badge it has earned
    1. Oct 292 posts

      • A pentest costs $10,000+ and happens once a year, while you ship code every day. Shannon is a free, open-source AI pentester that reads your code, runs real exploits, and reports only what it can…

        Read full on X, posted by @abu_saalim1

        @abu_saalim1 · x.com

      • Keygraph released Shannon, an open-source autonomous AI pentester for web applications and APIs. It analyzes source code, maps attack vectors, and executes real exploits to prove vulnerabilities…

        Read full on X, posted by @_qu4nt

        @_qu4nt · x.com

    2. 21 days earlier
    3. Oct 81 post

      • 5/ Grok has become one of the easiest ways to get Shannon running quickly. Its guardrails are generally compatible with legitimate pentesting workflows, and you can get started without going through…

        Read full on X, posted by @KeygraphHQ

        @KeygraphHQ · x.com

    4. 1 month earlier
    5. Sep 21 post

      • Benchmark details: Photoview 2.4.0, three BYO models — DeepSeek v4 Flash, Grok 4.6, Claude Opus 5. All three found the critical SQLi. Costs ran $6.10 to $115. Full methodology, reports, costs,…

        Read full on X, posted by @KeygraphHQ

        @KeygraphHQ · x.com

    6. Aug 301 post

      • THIS IS WHAT AI PENTESTING SHOULD LOOK LIKE IN 2026 Someone built Shannon, an open source AI pentesting tool that doesn’t just scan your app from the outside. It reads the source code. Then it uses…

        Read full on X, posted by @MAXdeg0

        @MAXdeg0 · x.com

    7. Aug 281 post

      • imagine handing someone your codebase and saying: break in, and don't tell me about anything you couldn't actually pull off. that's basically Shannon, an open-source AI pentester. it reads your…

        Read full on X, posted by @lifeisameeme

        @lifeisameeme · x.com

    8. 22 days earlier
    9. Aug 61 post

      • Shannon is an autonomous pentester powered by Claude that executes real attacks against live targets — 20+ confirmed vulnerabilities on OWASP Juice Shop, including DB exfiltration and auth bypass,…

        Read full on X, posted by @alindnbrg

        @alindnbrg · x.com

    10. Aug 21 post

      • someone open-sourced an autonomous security tester that doesn't just flag vulnerabilities, it proves them. it's called shannon. what it does on its own: → reads your source to plan an approach → maps…

        Read full on X, posted by @simplifyinAI

        @simplifyinAI · x.com

    11. Aug 11 post

      • • Proof-by-exploitation reports with reproducible PoC steps • White-box attack planning using source-code analysis • Resumable workspaces without re-running completed agents

        Read full on X, posted by @the_osps

        @the_osps · x.com

    12. Jul 311 post

      • 8/ Upgrading from 1.x: rerun the setup wizard before your first 2.0 scan. The three model tier variables are gone, and Google Vertex AI support has been removed. Full migration steps are in the…

        Read full on X, posted by @KeygraphHQ

        @KeygraphHQ · x.com

    You might also like

    Repositories close to KeygraphHQ/shannon
    FeaturedAdvertise to 180K+ monthly visitors
    Bifrost

    Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

    firetix/vibe-coding-penetration-tester

    Python

    Vibe Coding? Cool story. But your vibe might be "security breach waiting to happen." Introducing VibePenTester, the AI pen-tester who rolls its eyes at your half-baked code, discovers your vulnerabilities faster than your coworkers discover free pizza, and gently bullies your web app into compliance. Less "vibe check," more "reality check."

    17835

    LumosLab-Innovation/OpenHunterAI

    TypeScript

    Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding agents.

    33564

    BugTraceAI/BugTraceAI

    Shell

    Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.

    35939

    jaurakunal/isitsecure

    Python

    Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

    434

    hackerai-tech/hackerai

    TypeScript

    Find and fix vulnerabilities by chatting with AI

    817242

    pensarai/apex

    TypeScript

    AI-powered offensive security testing using autonomous agents, directly in your terminal.

    32163

    fzn0x/watchtower

    Python

    Watchtower is a simple AI-powered penetration testing automation CLI tool that leverages LLMs and LangGraph to orchestrate agentic workflows that you can use to test your websites locally. Generate useful pentest reports for your websites.

    22133

    BugTraceAI/BugTraceAI-CLI

    Python

    Agentic web-scanning engine with a terminal workspace, specialist tools, browser validation, reports, REST and MCP.

    18334

    vigolium/vigolium

    Go

    Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

    1.1k173