// Guard secrets & permissions
shannon
Autonomous white-box AI pentester for web apps and APIs.
Open source Maintained Dual-use For agents
IN ONE PARAGRAPH
shannon is autonomous white-box AI pentester for web apps and APIs.
Good for: Developers who want their agent (Claude Code, Codex, Cursor…) to guard secrets & permissions.
Not for: people who don’t want to install and run tools themselves.
01How to start
- 1Read the official README for requirements and permissions.
- 2Install it as the official guide describes.
- 3Tell your agent the command exists (e.g. in AGENTS.md / CLAUDE.md) so it knows when to call it.
02Alternatives & comparison
Compare side by side →03Related
- ›BlueDot Impact AI Alignment 课程 · BlueDot ImpactEnglish
- ›BlueDot Impact AI Governance 课程 · BlueDot ImpactEnglish
- ›AI Safety, Ethics and Society 教材 · Center for AI Safety / Dan HendrycksEnglish
- ›OWASP Top 10 for LLM Applications · OWASP GenAI Security ProjectMultilingual (incl. EN/ZH)
- ›MITRE ATLAS · MITREEnglish
- All tutorials →
Versions, why it is listed, for AI to read
Popularity evidence (third-party snapshots)
- GitHub stars:47,600 · whatstrending.ai 2026-10-10
- GitHub stars:48,493 · repos.ecosyste.ms 2026-10-10
- GitHub stars:48,493 · repos.ecosyste.ms 2026-10-12
- GitHub stars:48,493 · repos.ecosyste.ms 2026-10-13
- GitHub stars:48,493 · repos.ecosyste.ms 2026-10-14
- GitHub stars:48,493 · repos.ecosyste.ms 2026-10-15
- GitHub stars:48,493 · repos.ecosyste.ms 2026-10-16
- GitHub stars:49,070 · repos.ecosyste.ms 2026-10-19
- GitHub stars:49,070 · repos.ecosyste.ms 2026-10-20
- GitHub stars:49,070 · repos.ecosyste.ms 2026-10-21
- GitHub stars:49,070 · repos.ecosyste.ms 2026-10-22
For AI agents
- Interfaces:its own app or website
- Machine-readable record:/api/v1/software/shannon.json · llms.txt
- Added 2026-10-10 · updated 2026-10-22