shannon

AI

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Latest v2.4.0 · by KeygraphHQWebsiteKeygraphHQ/shannon

Release activity

Release activity — 10 releases across 10 days since Jun 11, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before Jun 11, 2026. Older weeks are hidden at this screen width.
MayJunJulAug
SundayNo releases on Jun 14, 2026No releases on Jun 21, 2026No releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026
MondayNo releases on Jun 15, 20261 release on Jun 22, 2026No releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 20261 release on Aug 10, 2026
TuesdayNo releases on Jun 16, 20261 release on Jun 23, 2026No releases on Jun 30, 2026No releases on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 20261 release on Aug 4, 2026No releases on Aug 11, 2026
WednesdayNo releases on Jun 17, 2026No releases on Jun 24, 2026No releases on Jul 1, 2026No releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026No releases on Aug 12, 2026
Thursday1 release on Jun 11, 2026No releases on Jun 18, 2026No releases on Jun 25, 2026No releases on Jul 2, 2026No releases on Jul 9, 20261 release on Jul 16, 2026No releases on Jul 23, 20261 release on Jul 30, 20261 release on Aug 6, 2026
Friday1 release on Jun 12, 2026No releases on Jun 19, 2026No releases on Jun 26, 2026No releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026
SaturdayNo releases on Jun 13, 2026No releases on Jun 20, 2026No releases on Jun 27, 20261 release on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026

10 releases since Jun 11, 2026

Changelog

v2.4.0

Added 1
  • Support pentests with Codex subscription auth

2.4.0 (2026-08-10)

Features
  • support pentests with Codex subscription auth (#419) (d4cc2ab)
View originalPermalink
How v2.4.0 went

v2.3.0

Added 1
  • CLI now supports any Pi provider via generic SHANNON_AI_API_KEY environment variable

2.3.0 (2026-08-06)

Features
  • cli: support any Pi provider via generic SHANNON_AI_API_KEY (#415) (a1675f8)
View originalPermalink
How v2.3.0 went

v2.2.0

Added 1
  • Record severity in analysis mode
Fixed 1
  • Fix prompt substitutions in worker

2.2.0 (2026-08-04)

Features
  • worker: record severity in analysis mode and fix prompt substitutions (#413) (86effd5)
View originalPermalink
How v2.2.0 went

v2.1.0

Added 2
  • Multi-provider model support
  • SARIF output capability
Fixed 1
  • Exploit-mode issues

2.1.0 (2026-07-30)

Features
  • multi-provider model support, SARIF output, and exploit-mode fixes (#402) (1ce250d)
View originalPermalink
How v2.1.0 went

v2.0.0

Added 1
  • Migrate agent runtime from Claude Agent SDK to pi harness
Removed 4
  • Google Vertex AI is no longer a supported provider
  • Remove CLAUDE_CODE_USE_VERTEX, ANTHROPIC_VERTEX_PROJECT, CLOUD_ML_REGION, and GOOGLE_APPLICATION_CREDENTIALS environment variables
  • Remove use_vertex, vertex_project, and cloud_ml_region config.toml keys
  • Remove CLAUDE_CODE_MAX_OUTPUT_TOKENS environment variable and max_output_tokens config.toml key

2.0.0 (2026-07-16)

Features
BREAKING CHANGES
  • worker: Google Vertex AI is no longer a supported provider. The CLAUDE_CODE_USE_VERTEX, ANTHROPIC_VERTEX_PROJECT, CLOUD_ML_REGION, and GOOGLE_APPLICATION_CREDENTIALS environment variables, along with the use_vertex, vertex_project, and cloud_ml_region config.toml keys, are removed. Vertex users must switch to Anthropic, AWS Bedrock, or a custom Anthropic-compatible base URL.

The CLAUDE_CODE_MAX_OUTPUT_TOKENS environment variable and the max_output_tokens config.toml key are also removed.

View originalPermalink
How v2.0.0 went

v1.9.0

Changed 1
  • Restructure run folder and improve terminal UX in CLI

1.9.0 (2026-07-04)

Features
  • cli: restructure run folder and improve terminal UX (#384) (00e5645)
View originalPermalink
How v1.9.0 went

v1.8.1

Fixed 1
  • Render agent deliverables before the success commit so resume preserves them
1.8.1 (2026-06-23)
Bug Fixes
  • render agent deliverables before the success commit so resume preserves them (#376) (5a2f78c)
View originalPermalink
How v1.8.1 went

v1.8.0

Added 1
  • Support multi-repo targets by removing .git check in preflight

1.8.0 (2026-06-22)

Features
  • preflight: support multi-repo targets by removing .git check (#371) (4be4853)
View originalPermalink
How v1.8.0 went

v1.7.0

Added 1
  • Support Claude Fable 5 with upgraded Claude Agent SDK to 0.3.173

1.7.0 (2026-06-12)

Features
  • ai: support Claude Fable 5 (upgrade Claude Agent SDK to 0.3.173) (#354) (3d1a3c7)
View originalPermalink
How v1.7.0 went

v1.6.0

Changed 1
  • Upgrade to Opus 4.8 and Claude Agent SDK 0.3.163

1.6.0 (2026-06-11)

Features
  • ai: upgrade to Opus 4.8 and Claude Agent SDK 0.3.163 (#353) (ac6db3b)
View originalPermalink
How v1.6.0 went
View all

Discussion