colonizer
install

modules / security

shannon

an ai pentester for web apps and apis, run against your app inside a colony.

securitytests only

status
tests only ships with colonizer, but is covered by tests only: it has not yet done real work in a colony.
version
installed in the colony with npx
licence
agpl-3.0 (shannon is keygraph’s)
source
docs/security-hunters.md ↗
docs
security hunters

what it does for you

a red-team run can name shannon as its hunter: the colony starts your app and runs shannon against it in its own microvm, and its findings go through the same checks as the swarm’s.

shannon is agpl, so colonizer never downloads or links it; only the command line is written into the colony.

what it needs

how to turn it on

the red-team wizard: choose shannon as the hunter.

how far it has been tested

covered by tests; this site records no run on a real machine.

← all security · every module