Shannon 3.0 Deep Dive: Mantis-Inspired Code Analysis Pipeline, Opus 5 Run Costs $115 With One False Positive
testingcatalog · x · 2026-09-08
Keygraph released Shannon 3.0 (AGPL-3.0), an open-source AI pentester runnable locally via npx.
How it works: Shannon is a CLI agent that reads an app's source code, figures out where it's likely to break, then attacks the running app with real exploits. Anything it can't demonstrate against the live target gets discarded — "no exploit, no report."
What's new in 3.0: A multi-stage security code analysis pipeline adapted from the open-source Mantis security review skills. It first builds its own picture of the app (components, interfaces, dependencies, data flows, trust boundaries, high-value assets), then agents follow attacker-controlled data from entry point to sensitive operation. Candidates are deduplicated, challenged by a review agent, checked for production viability, and confirmed against code paths before entering the exploitation queue. The pass is opt-in; a code analysis hypothesis never becomes a finding on its own.
Benchmarks: On Photoview 2.4.0 (the same app from Doyensec's Aikido-sponsored study), Shannon 3.0 with DeepSeek v4 Flash reported 18 findings for $6.10, Grok 4.6 reported 10 for $35.07, and Opus 5 reported 24 for $115 with one false positive.
More from coding & agent
- He benchmarks new models by having them build their own copilot — $28 of compute — bucolucas · 2026-10-27
- Founder generates 46 app promo videos in 4 days with Claude, skipping $11,500 in UGC fees — PrajwalTomar_ · 2026-10-27
- Should agents be allowed to change plans mid-task? Reddit debates the drift boundary — wistfulcracker84 · 2026-10-27
- HeyGen + Canva MCP turns slide speaker notes into an avatar presentation video — HeyGen · 2026-10-27
- Local beats cloud: Qwen 3.8 FN handles private student data as well as frontier models — dr_lm · 2026-10-27
- Cloudflare Computer adds agent interruption recovery and approval pauses in v0.7.0 — irvinebroque · 2026-10-27