Keygraph

Creators of Shannon (

[Keygraph @KeygraphHQ]

Grok is now your on-demand AI hacker.

Connect your xAI subscription to Shannon and run full pentests on your own apps.

No separate API bill.
No cyber verification required.

Every finding ships with a working proof of concept.

Open source, 49K+ stars.

@spacexai

[Keygraph @KeygraphHQ]

@alextalksai @spacexai Great! Let us know your thoughts!

[Keygraph @KeygraphHQ]

Grok is now your on-demand AI hacker.

Connect your xAI subscription to Shannon and run full pentests on your own apps.

No separate API bill.
No cyber verification required.

Every finding ships with a working proof of concept.

Open source, 49K+ stars.

@spacexai

[Keygraph @KeygraphHQ]

@robiartec @spacexai Shannon runs real exploits (creates users, submits forms, changes data), so it should only be used in a staging environment.

[Keygraph @KeygraphHQ]

@bernirov @spacexai You give it test credentials. Set the login URL, username, and password in the config, and describe the login flow in plain steps.

[Keygraph @KeygraphHQ]

@gelorria @spacexai We built Shannon as a tool for human pentesters. It handles exploit-verified testing so experts can spend their time on the more complex chained-attack work.

[Keygraph @KeygraphHQ]

@maxwell_lenoir @spacexai Thanks, Max! Appreciate it.

[Keygraph @KeygraphHQ]

@txbrraa @spacexai That part is on Grok’s side: its guardrails work with pentesting out of the box. If you’d rather use Anthropic or OpenAI, complete their verification and Shannon runs on those too.

[Keygraph @KeygraphHQ]

@deanwperkins @spacexai 🙌🙌

[Keygraph @KeygraphHQ]

@sergiorocaa @spacexai Usually 1 to 1.5 hours, depending on app size and model!

[Keygraph @KeygraphHQ]

@arceyul @spacexai Appreciate it!

[Keygraph @KeygraphHQ]

@dravenip @spacexai 🙌🙌

[Keygraph @KeygraphHQ]

@n0tisma @spacexai Yes. There’s an official GitHub Action and a GitLab CI component. It can gate releases on proven Critical and High findings. One note: CI uses an xAI API key rather than the subscription.

[Keygraph @KeygraphHQ]

@angeldot_ @spacexai Thank you! Its fully open source, and you provide the llm model of your choice!

[Keygraph @KeygraphHQ]

@robinstetic @spacexai Thank you!

[Keygraph @KeygraphHQ]

@ftcarpe @spacexai Let us know what it finds! If you run into any issues feel free to ask for support in our community Discord: https://t.co/odqgQODuQd

[Keygraph @KeygraphHQ]

@albacnt @spacexai Thank you!

[Keygraph @KeygraphHQ]

@nattcornelis @spacexai That’s the goal! Pentesting should not be a $4,000 engagement.

[Keygraph @KeygraphHQ]

Repo: https://t.co/f5ucUwBq6b

[Keygraph @KeygraphHQ]

6/ So if you already subscribe to Grok:

You may already have most of what you need for an on-demand AI pentester.

Shannon is open source:
https://t.co/f5ucUwBq6b

Grok + Shannon is a pretty powerful combination.

[Keygraph @KeygraphHQ]

1/ Your @xai Grok subscription is now basically an on-demand AI hacker.

Pair it with Shannon and you can pentest your applications whenever you want, using the subscription you already pay for.

No separate API bill. No extra token spend.

And it works surprisingly well.

[Keygraph @KeygraphHQ]

5/ Grok has become one of the easiest ways to get Shannon running quickly.

Its guardrails are generally compatible with legitimate pentesting workflows, and you can get started without going through an additional lengthy approval process.

Install Shannon.
Connect Grok.
Point it at your app.

Go.