# shannon changelog > Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production. - Vendor: KeygraphHQ - Category: AI - Official site: https://keygraph.io/ - Tracked by: What's New (https://whatsnew.fyi/product/shannon) - Harvested from: GitHub (KeygraphHQ/shannon) - Entries below: 10 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### v2.4.0 - Date: 2026-08-10 - Version: v2.4.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v2.4.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v2.4.0 - **added** — Support pentests with Codex subscription auth #### [2.4.0](https://github.com/KeygraphHQ/shannon/compare/v2.3.0...v2.4.0) (2026-08-10) ###### Features * support pentests with Codex subscription auth ([#419](https://github.com/KeygraphHQ/shannon/issues/419)) ([d4cc2ab](https://github.com/KeygraphHQ/shannon/commit/d4cc2ab974508405be1a2866368d02012f74a9b0)) ### v2.3.0 - Date: 2026-08-06 - Version: v2.3.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v2.3.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v2.3.0 - **added** — CLI now supports any Pi provider via generic SHANNON_AI_API_KEY environment variable #### [2.3.0](https://github.com/KeygraphHQ/shannon/compare/v2.2.0...v2.3.0) (2026-08-06) ###### Features * **cli:** support any Pi provider via generic SHANNON_AI_API_KEY ([#415](https://github.com/KeygraphHQ/shannon/issues/415)) ([a1675f8](https://github.com/KeygraphHQ/shannon/commit/a1675f839055baafa5ceace1f5bba0d3205a1422)) ### v2.2.0 - Date: 2026-08-04 - Version: v2.2.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v2.2.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v2.2.0 - **added** — Record severity in analysis mode - **fixed** — Fix prompt substitutions in worker #### [2.2.0](https://github.com/KeygraphHQ/shannon/compare/v2.1.0...v2.2.0) (2026-08-04) ###### Features * **worker:** record severity in analysis mode and fix prompt substitutions ([#413](https://github.com/KeygraphHQ/shannon/issues/413)) ([86effd5](https://github.com/KeygraphHQ/shannon/commit/86effd524054a152048d4c2aabb26f90cd79ee1e)) ### v2.1.0 - Date: 2026-07-30 - Version: v2.1.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v2.1.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v2.1.0 - **added** — Multi-provider model support - **added** — SARIF output capability - **fixed** — Exploit-mode issues #### [2.1.0](https://github.com/KeygraphHQ/shannon/compare/v2.0.0...v2.1.0) (2026-07-30) ###### Features * multi-provider model support, SARIF output, and exploit-mode fixes ([#402](https://github.com/KeygraphHQ/shannon/issues/402)) ([1ce250d](https://github.com/KeygraphHQ/shannon/commit/1ce250d6a510a1560be58cc13e9684636a3bb025)) ### v2.0.0 - Date: 2026-07-16 - Version: v2.0.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v2.0.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v2.0.0 - **added** — Migrate agent runtime from Claude Agent SDK to pi harness - **removed** — Google Vertex AI is no longer a supported provider - **removed** — Remove CLAUDE_CODE_USE_VERTEX, ANTHROPIC_VERTEX_PROJECT, CLOUD_ML_REGION, and GOOGLE_APPLICATION_CREDENTIALS environment variables - **removed** — Remove use_vertex, vertex_project, and cloud_ml_region config.toml keys - **removed** — Remove CLAUDE_CODE_MAX_OUTPUT_TOKENS environment variable and max_output_tokens config.toml key #### [2.0.0](https://github.com/KeygraphHQ/shannon/compare/v1.9.0...v2.0.0) (2026-07-16) ###### Features * **worker:** migrate agent runtime from Claude Agent SDK to pi harness ([#389](https://github.com/KeygraphHQ/shannon/issues/389)) ([5ff40f8](https://github.com/KeygraphHQ/shannon/commit/5ff40f8c6f694a5b50753b5e46ba061f88d0c6d6)), closes [#356](https://github.com/KeygraphHQ/shannon/issues/356) [#377](https://github.com/KeygraphHQ/shannon/issues/377) [#383](https://github.com/KeygraphHQ/shannon/issues/383) [#388](https://github.com/KeygraphHQ/shannon/issues/388) ###### BREAKING CHANGES * **worker:** Google Vertex AI is no longer a supported provider. The CLAUDE_CODE_USE_VERTEX, ANTHROPIC_VERTEX_PROJECT, CLOUD_ML_REGION, and GOOGLE_APPLICATION_CREDENTIALS environment variables, along with the use_vertex, vertex_project, and cloud_ml_region config.toml keys, are removed. Vertex users must switch to Anthropic, AWS Bedrock, or a custom Anthropic-compatible base URL. The CLAUDE_CODE_MAX_OUTPUT_TOKENS environment variable and the max_output_tokens config.toml key are also removed. ### v1.9.0 - Date: 2026-07-04 - Version: v1.9.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v1.9.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v1.9.0 - **changed** — Restructure run folder and improve terminal UX in CLI #### [1.9.0](https://github.com/KeygraphHQ/shannon/compare/v1.8.1...v1.9.0) (2026-07-04) ###### Features * **cli:** restructure run folder and improve terminal UX ([#384](https://github.com/KeygraphHQ/shannon/issues/384)) ([00e5645](https://github.com/KeygraphHQ/shannon/commit/00e56455dfb0f2626b63e7e9231980cfb48e2fe2)) ### v1.8.1 - Date: 2026-06-23 - Version: v1.8.1 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v1.8.1 - Permalink: https://whatsnew.fyi/product/shannon/releases/v1.8.1 - **fixed** — Render agent deliverables before the success commit so resume preserves them ##### [1.8.1](https://github.com/KeygraphHQ/shannon/compare/v1.8.0...v1.8.1) (2026-06-23) ###### Bug Fixes * render agent deliverables before the success commit so resume preserves them ([#376](https://github.com/KeygraphHQ/shannon/issues/376)) ([5a2f78c](https://github.com/KeygraphHQ/shannon/commit/5a2f78c5d9ef617c6e191725e0cccd8d177f361d)) ### v1.8.0 - Date: 2026-06-22 - Version: v1.8.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v1.8.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v1.8.0 - **added** — Support multi-repo targets by removing .git check in preflight #### [1.8.0](https://github.com/KeygraphHQ/shannon/compare/v1.7.0...v1.8.0) (2026-06-22) ###### Features * **preflight:** support multi-repo targets by removing .git check ([#371](https://github.com/KeygraphHQ/shannon/issues/371)) ([4be4853](https://github.com/KeygraphHQ/shannon/commit/4be4853fd3110a4097ad8b87dd611b07ed163ce9)) ### v1.7.0 - Date: 2026-06-12 - Version: v1.7.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v1.7.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v1.7.0 - **added** — Support Claude Fable 5 with upgraded Claude Agent SDK to 0.3.173 #### [1.7.0](https://github.com/KeygraphHQ/shannon/compare/v1.6.0...v1.7.0) (2026-06-12) ###### Features * **ai:** support Claude Fable 5 (upgrade Claude Agent SDK to 0.3.173) ([#354](https://github.com/KeygraphHQ/shannon/issues/354)) ([3d1a3c7](https://github.com/KeygraphHQ/shannon/commit/3d1a3c75f82d96d0614b74e463d2be101b7804f1)) ### v1.6.0 - Date: 2026-06-11 - Version: v1.6.0 - Original notes: https://github.com/KeygraphHQ/shannon/releases/tag/v1.6.0 - Permalink: https://whatsnew.fyi/product/shannon/releases/v1.6.0 - **changed** — Upgrade to Opus 4.8 and Claude Agent SDK 0.3.163 #### [1.6.0](https://github.com/KeygraphHQ/shannon/compare/v1.5.0...v1.6.0) (2026-06-11) ###### Features * **ai:** upgrade to Opus 4.8 and Claude Agent SDK 0.3.163 ([#353](https://github.com/KeygraphHQ/shannon/issues/353)) ([ac6db3b](https://github.com/KeygraphHQ/shannon/commit/ac6db3b52ec516c249da27ada3f20d3f3d786883))