Alternatives to keygraphhq/shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Source: keygraphhq/shannon · SPDX licence: AGPL-3.0

Comparable repositories

  • mukul975/anthropic-cybersecurity-skills · 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0 · Apache-2.0
  • usestrix/strix · Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. · Apache-2.0
  • vxcontrol/pentagi · Fully autonomous AI Agents system capable of performing complex penetration testing tasks · MIT
  • agricidaniel/claude-cybersecurity · AI-powered cybersecurity code review skill for Claude Code. 8 specialist agents, OWASP 2025, CWE Top 25, MITRE ATT&CK, 11 languages, zero configuration. · MIT
  • elementalsouls/claude-bughunter · A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices. · MIT
  • openai/codex-security · OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security · Apache-2.0
  • shuvonsec/claude-bug-bounty · AI-powered bug bounty hunting toolkit that works with or without subscription. · MIT
  • samugit83/redamon · Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent. · MIT
  • zyrexnn/cybermes · Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration. · Apache-2.0
  • arcangel0/mitsu · Meet Mitsu, your chibi red-team operator. Connect your AI provider, set the scope, and she can take an authorized pentest from recon and attack-surface mapping through vulnerability discovery, > exploitation, and post-exploitation, armored with 165+ MCP-connected tools and live session intel. Guide every step or let her pwn autonomously. ( ◠‿◠) · MIT

Comparison from the dated registry snapshot. Review each project and licence independently.